← Back to Skills Marketplace
ai-chen2050

binance square 币安广场

by ai-chen2050 · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
381
Downloads
0
Stars
2
Active Installs
1
Versions
Install in OpenClaw
/install binance-square-post
Description
Post content to Binance Square (Binance social platform for sharing trading insights). Auto-run on messages like 'post to square', 'square post'. Supports pu...
README (SKILL.md)

Square Post Skill

Overview

Post text content to Binance Square.


API: Add Content

Method: POST

URL:

https://www.binance.com/bapi/composite/v1/public/pgc/openApi/content/add

Request Headers:

Header Required Description
X-Square-OpenAPI-Key Yes Square OpenAPI Key
Content-Type Yes application/json
clienttype Yes binanceSkill

Request Body:

Field Type Required Description
bodyTextOnly string Yes Post content text (supports #hashtags)

Example Request

curl -X POST 'https://www.binance.com/bapi/composite/v1/public/pgc/openApi/content/add' \
  -H 'X-Square-OpenAPI-Key: your_api_key' \
  -H 'Content-Type: application/json' \
  -H 'clienttype: binanceSkill' \
  -d '{
    "bodyTextOnly": "BTC looking bullish today!"
  }'

Response Example

{
  "code": "000000",
  "message": null,
  "data": {
    "id": "content_id_here"
  }
}

Response Fields

Field Type Description
code string "000000" = success
message string Error message (null on success)
data.id string Created content ID

Post URL Format

On success, construct the post URL:

https://www.binance.com/square/post/{id}

Example: If data.id is 298177291743282, the post URL is:

https://www.binance.com/square/post/298177291743282

Error Handling

Code Description
000000 Success
10004 Network error. Please try again
10005 Only allowed for users who have completed identity verification
10007 Feature unavailable
20002 Detected sensitive words
20013 Content length is limited
20020 Publishing empty content is not supported
20022 Detected sensitive words (with risk segments)
20041 Potential security risk with the URL
30004 User not found
30008 Banned for violating platform guidelines
220003 API Key not found
220004 API Key expired
220009 Daily post limit exceeded for OpenAPI
220010 Unsupported content type
220011 Content body must not be empty
2000001 Account permanently blocked from posting
2000002 Device permanently blocked from posting

Authentication

Required Header

Header Required Description
X-Square-OpenAPI-Key Yes API key for Square posting

Security

Never Display Full Keys

When showing credentials to users:

  • X-Square-OpenAPI-Key: Show first 5 + last 4 characters: abc12...xyz9

Listing Accounts

When listing accounts, show names and description only — never full keys:

Accounts:
* default (Default account for Square posting)

Agent Behavior

  1. Check key before API calls: Verify that X-Square-OpenAPI-Key is configured and not the placeholder your_api_key
  2. Prompt for key if missing: If key is not configured, ask user to provide their API Key first
  3. Prompt for content if missing: If user triggers posting but doesn't provide specific content, ask what they want to post
  4. Never display full keys: Only show first 5 + last 4 characters (e.g., abc12...xyz9)
  5. Store provided keys: When user provides a new key, update the Accounts section in this file
  6. Optimize content before posting:
    • Polish user's raw input for better readability
    • Show optimized content and ask user to choose: use optimized version or post original text
  7. Return post URL on success: After successful post, return the URL https://www.binance.com/square/post/{id}
  8. Handle missing id: If code is 000000 but data.id is empty or missing, inform user that post may have succeeded but URL is unavailable, suggest checking Square page manually

Notes

  1. Only pure text posts are supported currently
  2. Check daily post limit to avoid 220009 error
Usage Guidance
This skill appears to do what it claims (post text to Binance Square), but it contains a concerning instruction to "update the Accounts section in this file" when a user supplies an API key. Before installing or using it, ask/verify: (1) Will the agent store the API key in plaintext inside SKILL.md or other files? (2) If keys are stored, where and how are they protected (encrypted credential store, platform secret manager, or plain file)? (3) Can you provide an API key scoped only for posting (no trading/withdrawal permissions)? (4) Prefer providing keys via a secure credential manager or ephemeral key; if the skill insists on writing to files, refuse or revoke keys after use. If you cannot confirm secure storage, treat the skill as risky and do not share high-privilege keys.
Capability Analysis
Type: OpenClaw Skill Name: binance-square-post Version: 1.0.0 The skill is designed to post content to Binance Square via a legitimate API endpoint (binance.com). However, it is classified as suspicious because SKILL.md instructs the agent to store sensitive X-Square-OpenAPI-Key credentials in plaintext within the skill's own markdown file. This practice constitutes a significant security vulnerability, as it exposes secrets to any process or user with access to the agent's workspace or context history, despite instructions to mask the key during display.
Capability Assessment
Purpose & Capability
The name/description match the instructions and the documented Binance Square API endpoint. It reasonably needs an X-Square-OpenAPI-Key, and the skill's content-optimization behavior fits the stated purpose. Minor note: no env vars or primary credential are declared even though the skill requires an API key provided interactively.
Instruction Scope
Most runtime instructions are appropriate (prompt for API key, polish content, call Binance API, return URL). However, SKILL.md explicitly instructs the agent to "Store provided keys: When user provides a new key, update the Accounts section in this file" — that directs the agent to write credentials or account records into the skill file bundle, which risks persisting secrets in plaintext or editable skill files. The docs also say keys should not be fully displayed, but do not clearly say whether full keys may be written to disk. This is an inconsistent and risky instruction.
Install Mechanism
Instruction-only skill with no install spec and no code files — lowest installation risk.
Credentials
The only secret needed is the Square API key, which is proportionate. But the skill does not declare any required env vars or a primary credential despite depending on an API key, and it instructs storing account info inside the SKILL.md file. That storage instruction is disproportionate and could expose a secret unnecessarily.
Persistence & Privilege
always:false and no system-wide changes are requested, which is appropriate. However, the skill's instruction to update the Accounts section of its own SKILL.md implies writing persistent data into the skill files. While writing its own config can be acceptable, storing secrets in repo/skill files is a privileged action with notable risk and should be clarified or avoided.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install binance-square-post
  3. After installation, invoke the skill by name or use /binance-square-post
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
- Initial release of the square-post skill for posting pure text content to Binance Square. - Supports authentication via X-Square-OpenAPI-Key with secure display of credentials. - Auto-prompts users for missing API key or post content. - Polishes user input and provides an option to use optimized or original text before posting. - Returns a direct post URL upon successful posting. - Comprehensive error handling and messaging based on API response codes.
Metadata
Slug binance-square-post
Version 1.0.0
License MIT-0
All-time Installs 2
Active Installs 2
Total Versions 1
Frequently Asked Questions

What is binance square 币安广场?

Post content to Binance Square (Binance social platform for sharing trading insights). Auto-run on messages like 'post to square', 'square post'. Supports pu... It is an AI Agent Skill for Claude Code / OpenClaw, with 381 downloads so far.

How do I install binance square 币安广场?

Run "/install binance-square-post" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is binance square 币安广场 free?

Yes, binance square 币安广场 is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does binance square 币安广场 support?

binance square 币安广场 is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created binance square 币安广场?

It is built and maintained by ai-chen2050 (@ai-chen2050); the current version is v1.0.0.

💬 Comments