← Back to Skills Marketplace
Xxyy Trade
by
Jimmy-Holiday
· GitHub ↗
· v1.3.0
· MIT-0
493
Downloads
0
Stars
0
Active Installs
7
Versions
Install in OpenClaw
/install xxyy-trade-skill
Description
This skill should be used when the user asks to "buy token", "sell token", "swap token", "trade crypto", "check trade status", "query transaction", "scan tok...
Usage Guidance
This skill appears to be what it says (an XXYY API wrapper) but exercise caution: the XXYY API key grants the ability to execute real trades and there is no read-only key. Before installing, verify the publisher and homepage (https://www.xxyy.io), confirm which SKILL.md / metadata will be used (there are two conflicting SKILL.md files), and decide whether you want an agent to be able to invoke the skill autonomously. Use a dedicated API key with minimal funds, enable IP whitelisting on the XXYY side, avoid storing the key in version control, and test with tiny transactions first. If you need clarity, ask the publisher which SKILL.md is authoritative and whether autonomous invocation is intended.
Capability Analysis
Type: OpenClaw Skill
Name: xxyy-trade-skill
Version: 1.3.0
The xxyy-trade skill is a comprehensive tool for on-chain trading and token analysis on Solana, Ethereum, BSC, and Base via the XXYY Open API (xxyy.io). It includes well-defined procedures for wallet management, token swaps, and automated scanning strategies (AI and Twitter-based). The skill incorporates strong security practices, such as mandatory user confirmation before executing trades, explicit warnings regarding API key sensitivity, and strict parameter validation. No evidence of malicious intent, data exfiltration, or unauthorized execution was found in SKILL.md or _meta.json.
Capability Assessment
Purpose & Capability
Name/description align with required artifacts: the skill calls the XXYY Open API and declares curl and XXYY_API_KEY. Requesting a single XXYY_API_KEY and curl is coherent for an API-wrapping trading skill.
Instruction Scope
SKILL.md instructions are narrowly scoped to the documented XXYY endpoints and describe buy/sell/query/feed/ping operations. The instructions warn the API key can execute real trades and recommend IP whitelisting. The skill does not instruct reading unrelated files or other environment variables.
Install Mechanism
No install spec and no code files — instruction-only. This is low risk because nothing is downloaded or written to disk by the skill itself.
Credentials
Only XXYY_API_KEY is required which is appropriate for the API, but the documentation explicitly states there is no read‑only key: the same key can execute real on‑chain trades. That makes the single required credential highly privileged — loss of the key = loss of funds. This is expected for a custodial trading integration but is high risk and should be treated accordingly.
Persistence & Privilege
Registry metadata and the included SKILL.md conflict: the registry summary shows model-invocation defaults (disabled-model-invocation: false by default) while the embedded skills/xxyy-trade/SKILL.md sets disabled-model-invocation: true and lists allowed-tools (Bash, Read, AskUserQuestion). The duplicate SKILL.md files and mismatch of invocation settings are incoherent and could affect whether the agent can call the skill autonomously.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install xxyy-trade-skill - After installation, invoke the skill by name or use
/xxyy-trade-skill - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.3.0
xxyy-trade-skill v1.3.0
- Added support for new API query types: KOL Buy List, Tag Holder Buy List, Label List (SOL only), Signal List (AI trending, SOL/BSC), Trending List (hot tokens, SOL/BSC), and Launch Token (token creation on SOL/BSC).
- Extended skill triggers to include "launch token", "create token", "发币", and "创建代币".
- Updated documentation to list all newly supported endpoints and usage details.
- Removed the legacy README.md; SKILL.md now provides complete usage and reference.
v1.2.3
- Added support and documentation for the "get IP" endpoint to check outbound IP (useful for API key whitelisting).
- Updated description keywords to include "check IP", "get IP", "IP whitelist", "查IP", "IP白名单".
- Added a security recommendation for configuring API key IP whitelists and instructions for using the `get_ip` tool.
- Expanded the endpoint list to include `GET /api/trade/open/api/ip` (Get IP, exempt from whitelist).
- No breaking changes to existing trading or data query functionality.
v1.2.2
**Summary:** Expanded supported trigger phrases and updated documentation with a strict, complete endpoint list and new API endpoints.
- Added new trigger phrases (AI scan, auto/smart/tweet scan, onboarding, get started, and Chinese equivalents) to the skill description.
- Explicitly documented a full, strict list of supported API endpoints for clarity and safe usage.
- Added documentation for new endpoints: Trade History, Token Query, Wallet Info, List Wallets, and PNL Query.
- Emphasized that only listed endpoints are available; unsupported operations should be clearly communicated.
v1.2.1
xxyy-trade-skill v1.2.1
- Expanded supported user intents to include wallet-related queries ("list wallets", "show wallets", "my wallets") in the SKILL.md description.
- Version bump to 1.2.1.
- Documentation updates only; no API or behavior changes.
v0.1.2
xxyy-trade-skill v0.1.2
- Clarified and highlighted key security information in documentation, including visual warnings about API key sensitivity.
- Made environment variable setup and API key instructions more concise.
- Minor formatting improvements to metadata and documentation for easier reading.
- No functional or API changes. This version is documentation-only.
v0.1.1
xxyy-trade-skill v0.1.1 changelog
- Added detailed security notes to the documentation, clarifying the custodial trading model and the sensitivity of API Keys.
- Updated SKILL.md to emphasize that trading is custodial (trades are executed by XXYY on behalf of the user; no private keys needed).
- Added warnings about API Key permissions and security best practices.
- Specified that only XXYY_API_KEY is strictly required in the environment variables.
v0.1.0
xxyy-trade-skill 1.1.0 changes:
- Added detailed documentation for buying, selling, and swapping tokens across Solana, Ethereum, BSC, and Base using the XXYY Open API.
- Included authentication and environment setup instructions, emphasizing the need for a valid XXYY API key.
- Documented trade query, token scan (feed), status checks, and API ping endpoints with usage examples and comprehensive parameter descriptions.
- Listed advanced filter options for token scanning, covering market data and social metrics.
- Specified DEX and quote token values supported on Solana and BSC chains.
Metadata
Frequently Asked Questions
What is Xxyy Trade?
This skill should be used when the user asks to "buy token", "sell token", "swap token", "trade crypto", "check trade status", "query transaction", "scan tok... It is an AI Agent Skill for Claude Code / OpenClaw, with 493 downloads so far.
How do I install Xxyy Trade?
Run "/install xxyy-trade-skill" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Xxyy Trade free?
Yes, Xxyy Trade is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Xxyy Trade support?
Xxyy Trade is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Xxyy Trade?
It is built and maintained by Jimmy-Holiday (@jimmy-holiday); the current version is v1.3.0.
More Skills