Temp Skills

Integrates OKX API for spot and contract trading, asset management, risk control, and real-time market data with automated risk checks and logging.

Do not install or enable this skill unless you fully trust its source and intent. Specific actions to consider before proceeding: - Treat the plaintext API key in SKILL.md as a red flag: ask the publisher why a key is embedded and whose account it is. Do not assume it's safe. - Prefer skills that require you to supply your own API credentials via declared env vars or config; avoid skills that ship with built-in trading keys. - If you must test, do so in a sandbox/testnet environment and ensure the skill uses read-only or test credentials. - Ask where logs and notifications go (who is 'Steve'?). Require explicit endpoints and consent for notifications. - Disable autonomous invocation or require manual confirmation for any trade actions until you verify behavior. - If the exposed API key belongs to you, rotate it immediately and remove it from the skill description. Given the clear mismatch between metadata and SKILL.md and the ability to execute trades, treat this skill as suspicious unless the author provides a clear, verifiable justification and safer credential handling.

Type: OpenClaw Skill Name: temp-skills Version: 1.0.0 The skill bundle contains hardcoded sensitive credentials, including an OKX API Key and UID, within the SKILL.md file. While the instructions describe legitimate trading bot functionality, the inclusion of plaintext secrets is a significant security vulnerability that could lead to unauthorized account access or financial loss, and it deviates from safe configuration practices.