← Back to Skills Marketplace
ZKE Exchange Trading Skill
by
ZKE-Exchange
· GitHub ↗
· v1.0.13
· MIT-0
202
Downloads
0
Stars
0
Active Installs
14
Versions
Install in OpenClaw
/install zke-trading
Description
ZKE AI Master Trader (Official). Control spot and futures trading, manage assets, and access real-time market data on ZKE Exchange.
Usage Guidance
This package appears to implement exactly what it says (trading, transfers, withdrawals, market data). Before installing: (1) Verify the publisher/repository links (homepage and GitHub) and confirm the code origin. (2) Create API keys limited to Read/Trade only (disable Withdrawals) and enable IP whitelisting — do not supply a withdrawal-enabled key unless you explicitly trust the source. (3) Review package.json and requirements.txt for third-party dependencies you don't expect. (4) Run the installer in an isolated environment (container or VM) and inspect the built plugin before enabling in production. (5) Consider disabling autonomous model invocation for this skill or require manual confirmation for any action that moves funds. If you want higher assurance, ask the maintainer for a signed release or official distribution channel and/or perform an independent code audit of the included files.
Capability Analysis
Type: OpenClaw Skill
Name: zke-trading
Version: 1.0.13
The bundle is a comprehensive trading integration for the ZKE Exchange, providing tools for spot, futures, and margin trading, as well as asset management. It follows standard security practices by utilizing environment variables (ZKE_API_KEY, ZKE_SECRET_KEY) for authentication and includes explicit instructions in SKILL.md for the AI agent to require user confirmation before executing any financial transactions. The implementation uses a standard Python/TypeScript bridge via the Model Context Protocol (MCP), and the code (main.py, mcp_server.py) is well-structured, lacks obfuscation, and contains no evidence of data exfiltration or unauthorized execution.
Capability Assessment
Purpose & Capability
Name/description request ZKE API keys and the bundle contains Python and TypeScript code that implements spot/futures trading, transfers, withdrawals, and WebSocket market data. Requiring python3 and npm is consistent with the provided Python runtime and local TypeScript bridge.
Instruction Scope
SKILL.md instructs running the provided install_openclaw_plugin.sh and setting ZKE_API_KEY/ZKE_SECRET_KEY only. The README claim 'does not generate or use local plaintext configuration files' is mostly true for credentials (they come from env vars), but the installer creates a local virtualenv (.venv) and compiles/installs the plugin locally; the runtime code exposes many trading/withdrawal operations via MCP tools.
Install Mechanism
No external arbitrary binary downloads; installer runs npm install/build and pip install from requirements.txt and registers the plugin via the openclaw CLI. This is expected but causes network pulls of npm/pip packages (normal but should be reviewed). The install script also requires the host to have the openclaw CLI available.
Credentials
Only ZKE_API_KEY and ZKE_SECRET_KEY are required which is proportionate for an exchange integration. However the code includes withdrawal and transfer functionality — so API keys with withdrawal permission would allow asset movement. SKILL.md itself recommends disabling withdrawals and using IP whitelisting; that advice should be followed.
Persistence & Privilege
always:false (no forced always-on). The skill exposes MCP tools (mcp.tool) that the agent can invoke (disable-model-invocation is false by default), which is normal for skills. Consider whether you want the agent to be allowed to autonomously invoke trading/withdrawal actions.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install zke-trading - After installation, invoke the skill by name or use
/zke-trading - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.13
- Updated to version 1.0.13.
- Improved metadata format and added homepage and emoji for better discoverability.
- Updated configuration to clarify required environment variables and host dependencies.
- Removed the old skill.json file for a cleaner setup.
- Documentation now highlights key features and provides direct resource links.
v1.0.12
- Introduced official OpenClaw (MCP) plugin implementation for ZKE Exchange trading.
- Added secure installation script and TypeScript/Python bridge for local execution.
- Enforced strict API credential handling via environment variables (no plaintext config).
- Expanded documentation for security architecture, setup, and best practices.
- Added new tools for spot, futures, account, wallet, and transfer management.
v1.0.11
- Simplified the skill by replacing the content with concise usage guidelines focused on rule enforcement for ZKE Exchange tools and symbol formatting.
- Removed 41 files, including all plugin source code, installer scripts, and supporting documentation.
- Updated usage instructions and best practices in SKILL.md, emphasizing critical parameters and symbol formats.
- Retained only the SKILL.md file with a new focus on tool usage, parameter quirks, and capability summary.
- Streamlined installation, setup, and security documentation to prioritize proper tool interaction.
v1.0.10
- **Metadata & Provenance Aligned:** Completely resolved "Registry Mismatch" warnings. Unified `skill.json`, `openclaw.plugin.json`, and `package.json` to explicitly declare `ZKE_API_KEY` and `ZKE_SECRET_KEY` requirements, and added the official ZKE Exchange homepage.
- **Zero Plaintext Storage:** Eliminated local credential storage risks. Completely purged `config.json` generation and read-logic from the installer, `main.py`, and `mcp_server.py`. The plugin now strictly enforces standard MCP environment variables for all authentication.
- **Supply-Chain & Installer Secured:** Removed remote `git clone` commands and hardcoded absolute paths from the install script. The installer is now a purely local, verifiable build tool that does not alter global host permissions.
v1.0.9
- **Security Compliance:** Completely removed local `config.json` generation and usage from all entry points (`main.py`, `mcp_server.py`, and the installer).
- **Authentication:** Enforced strict adherence to MCP standards by relying exclusively on `ZKE_API_KEY` and `ZKE_SECRET_KEY` environment variables.
- **Installer Cleanup:** Removed remote `git clone` commands; the installer is now a purely local, verifiable build tool.
- **Documentation:** Consolidated metadata to resolve previous Registry Mismatches and updated `SKILL.md` to reflect a zero-plaintext-storage security model.
v1.0.8
- Enforced stricter security: removed support for local plaintext configuration files; credentials are only accepted via environment variables.
- Updated documentation to clarify withdrawal API access risks and the need for IP whitelisting.
- Improved installation instructions, highlighting local-only builds and secure environment configuration.
- Added new example for internal asset transfer commands in the Magic Prompts section.
- Refined tags and updated display information for clarity.
v1.0.7
- **Security & Compliance:** Removed remote execution scripts and `git clone` from the installer to ensure a fully local, verifiable build process.
- **Authentication Alignment:** Upgraded Python SDK (`main.py`) to natively prioritize environment variables (`ZKE_API_KEY`, `ZKE_SECRET_KEY`), fully aligning runtime behavior with registry metadata and MCP standards.
- **Privilege Management:** Removed instructions and script actions that modified OpenClaw global permissions (`gateway.mode local`, `tools.profile = full`), enforcing a Strict Least Privilege model.
- **Documentation:** Consolidated setup guides into a unified, compliant `SKILL.md` and removed conflicting README files to resolve "Registry Mismatch" and "Inconsistency" warnings.
v1.0.6
- Documentation files and examples have been removed for a more streamlined distribution.
- SKILL.md now includes improved security instructions and a Transparency Report for credential storage.
- Installation guide updated to focus on the automated install process using the provided script.
- Configuration now supports both environment variables and a local config file.
- Magic prompt examples revised for clarity and direct use.
v1.0.5
zke-trading v1.0.5
- Updated documentation with a new SKILL.md featuring improved installation guides and security information.
- Added skill.json for enhanced skill metadata.
- Removed install.sh to streamline installation options.
- Enhanced clarity on credential handling and recommended security practices.
v1.0.4
ZKE Trading Skill 1.0.4 Changelog
- Updated SKILL.md to a new metadata format, including slug, display name, version, tags, and attributes.
- Extended documentation with environment variable setup instructions and sample prompts.
- Added official resource links (website, guide, GitHub) and licensing info.
- Security and privacy notes have been improved for clarity.
- No code or file changes in this release.
v1.0.3
zke-trading v1.0.3
- Initial public release with complete source code and professional setup scripts.
- Added secure, local-first trading functions for ZKE Exchange integration via OpenClaw (MCP) protocol.
- Included Pro-grade install script for automated environment configuration and dependency management.
- All logic and credentials remain local with support for IP restriction and clear security recommendations.
- Provided extensive documentation, sample prompts, and manual setup guides.
v1.0.2
ZKE Trading Skill v1.0.2 Changelog
- Clarified and updated security guidance, emphasizing required IP Whitelisting for API access and strong recommendations for withdrawal permissions.
- Improved configuration instructions with explicit requirements for setting API keys as environment variables.
- Enhanced installation section: split into clear automated (one-click) and manual setup instructions.
- Expanded and clarified example Magic Prompts for easier onboarding.
- Updated official resource links and streamlined documentation for accuracy and clarity.
v1.0.1
- Expanded documentation highlighting local-only key storage and privacy guarantees.
- New section detailing automated and manual installation processes, including step-by-step agent integration and environment variable setup.
- Clarified installer behavior and security features, emphasizing auditability and zero cloud exposure.
- Updated and organized quick-start prompts and links to official resources.
- License and development attribution added for transparency.
v1.0.0
Initial release of ZKE Trading Skill for OpenClaw.
Metadata
Frequently Asked Questions
What is ZKE Exchange Trading Skill?
ZKE AI Master Trader (Official). Control spot and futures trading, manage assets, and access real-time market data on ZKE Exchange. It is an AI Agent Skill for Claude Code / OpenClaw, with 202 downloads so far.
How do I install ZKE Exchange Trading Skill?
Run "/install zke-trading" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is ZKE Exchange Trading Skill free?
Yes, ZKE Exchange Trading Skill is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does ZKE Exchange Trading Skill support?
ZKE Exchange Trading Skill is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created ZKE Exchange Trading Skill?
It is built and maintained by ZKE-Exchange (@zke-exchange); the current version is v1.0.13.
More Skills