← Back to Skills Marketplace
67
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install pionex-bot
Description
Use when the user asks to create, query, list, adjust, reduce, or cancel Pionex bot orders (Futures Grid, Spot Grid, Smart Copy). Includes listing/paginating...
Usage Guidance
This skill appears to be written to control Pionex trading bots via a CLI, which legitimately requires exchange API keys and careful provenance. Before installing or using it: 1) Verify the skill's origin — ask for a homepage/repository or an official Pionex package link and confirm the npm package name and publisher on npmjs.com and GitHub. 2) Require explicit declarations: ask the author to list the exact environment variables (e.g., PIONEX_API_KEY, PIONEX_API_SECRET) and the minimum required API scopes (never give withdraw permissions unless absolutely required). 3) Prefer using the skill in dry-run mode and require explicit user confirmation for any write action; never allow the skill to run with autonomous write privileges without manual approval. 4) If you must provide keys for testing, create a restricted API key with only the minimal scopes (trading/bot, no withdrawals). 5) If provenance cannot be established (no official homepage/repo/publisher), treat this as untrusted and avoid using it with real funds. Providing the package's official URL, publisher identity, or a repo would increase confidence and could move this assessment toward benign.
Capability Analysis
Type: OpenClaw Skill
Name: pionex-bot
Version: 1.0.0
The pionex-bot skill provides a legitimate interface for managing Pionex trading bots (Futures Grid, Spot Grid, and Smart Copy) via the pionex-trade-cli. The SKILL.md file includes robust safety rules for the AI agent, such as mandatory confirmation for write operations, use of --dry-run flags, and explicit parameter validation. No evidence of data exfiltration, malicious execution, or prompt injection was found; the skill appears well-aligned with its stated purpose of cryptocurrency bot management.
Capability Tags
Capability Assessment
Purpose & Capability
SKILL.md clearly intends to manage Pionex bot lifecycle and explicitly says API credentials and bot permissions are required, and references a CLI binary (pionex-trade-cli). The registry metadata, however, declares no required env vars or install spec. The SKILL.md claims author 'pionex' but the registry entry has no homepage and an unknown owner — these provenance and declaration gaps are inconsistent with a sensitive trading skill.
Instruction Scope
The runtime instructions are narrowly focused on running the pionex-trade-cli commands to list, create, adjust, reduce, cancel bots and to push trading signals; they include useful safety rules (confirm write intent, use --dry-run, call check_params). The instructions do not ask to read unrelated system files, but they do assume access to account-level API credentials and the ability to perform trading writes and signal pushes.
Install Mechanism
SKILL.md embeds an agent.requires.install block that references an npm package (@pionex/pionex-ai-kit) providing pionex-trade-cli. The registry metadata shown elsewhere lists no install spec; this mismatch is concerning. Installing an npm package from the public registry is a moderate-risk action (network download and code run) but not inherently malicious — provenance verification is needed.
Credentials
The skill states it requires API credentials and bot permissions (read/write trading scope), but the registry lists no required environment variables or primary credential. A bot-management skill legitimately needs API keys (key + secret, with trading permissions), so the absence of declared credentials and explicit required env var names is a disproportionate omission and a red flag. Also pushing signals may need additional role credentials which are not described.
Persistence & Privilege
The skill does not request always:true and does not declare config path or system-level persistence. Autonomous invocation is allowed (platform default) — given the sensitive write capabilities (trading ops), allowlisting/explicit user confirmation for writes is important but not enforced by registry metadata.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install pionex-bot - After installation, invoke the skill by name or use
/pionex-bot - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release
Metadata
Frequently Asked Questions
What is pionex-bot?
Use when the user asks to create, query, list, adjust, reduce, or cancel Pionex bot orders (Futures Grid, Spot Grid, Smart Copy). Includes listing/paginating... It is an AI Agent Skill for Claude Code / OpenClaw, with 67 downloads so far.
How do I install pionex-bot?
Run "/install pionex-bot" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is pionex-bot free?
Yes, pionex-bot is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does pionex-bot support?
pionex-bot is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created pionex-bot?
It is built and maintained by pibrandon (@pibrandon); the current version is v1.0.0.
More Skills