OpenClaw Binance

实时监控币安量化交易策略，分析表现，生成风险报告并推送多渠道风险预警。

This skill largely implements a simple Binance monitor, but there are a few questionable items you should consider before installing or supplying real API keys: - The README/SKILL.md and skill.json promise broader features (email/SMS alerts, advanced scheduling) that the shipped code does not implement. Expect the code to only fetch hourly klines, compute basic metrics, save a markdown report, and post to a Feishu webhook. - SKILL.md omits that you must rename config.example.json to config.json (main.py will exit if config.json is missing). Follow the code's requirements, not the prose. - The project asks you to put your Binance API key and secret into a local config file. Prefer using API keys with trading-only permissions and withdrawals disabled, or use Binance testnet keys while evaluating. Do not reuse high-privilege keys. - main.py imports openclaw_sdk and config.example.json contains OPENCLAW_GATEWAY, but the code does not use them — this unexplained leftover could indicate incomplete code or planned behavior not yet implemented. Treat it as a warning: review the code for modifications before running. - The code writes reports to a data/binance_trades folder in the running directory and will make outbound HTTPS requests to Binance (via python-binance) and to the configured Feishu webhook. If you plan to run this, run it in an isolated account or VM and inspect the config file for any webhook/endpoint values you do not recognize. - If you want to proceed: (1) review the main.py source yourself, (2) create API keys with minimal permissions, (3) run in a safe environment, and (4) consider adding secrets-management (env vars or OS-protected vault) instead of storing keys in plaintext.

Type: OpenClaw Skill Name: openclaw-binance Version: 0.1.0 The OpenClaw skill 'openclaw-binance' is designed for Binance quantitative trading monitoring. It loads API keys and a Feishu webhook URL from a user-configured `config.json`, which is a standard and secure practice. The `main.py` script interacts with the Binance API to fetch market data, performs local strategy analysis, generates reports saved locally, and sends alerts to the user-specified Feishu webhook. There is no evidence of data exfiltration beyond the intended alert messages, no malicious execution (e.g., `os.system`, `eval`), no persistence mechanisms, and no prompt injection attempts in the `SKILL.md` or `README.md` files. All actions align with the stated purpose of a trading monitoring system.