← Back to Skills Marketplace
numpy0001

okx-cex-bot

by numpy0001 · GitHub ↗ · v1.3.2 · MIT-0
cross-platform ⚠ suspicious
549
Downloads
0
Stars
5
Active Installs
9
Versions
Install in OpenClaw
/install okx-cex-bot
Description
Manage Grid bots (spot/contract/coin-margined) and DCA Martingale bots (Spot DCA 现货马丁 / Contract DCA 合约马丁) on OKX. Covers create, stop, amend, monitor P&L, T...
Usage Guidance
This skill's instructions expect you to have (or to install) the OKX CLI and to use API keys or OAuth stored in your local OKX config, but the registry metadata does not advertise those requirements — that's the primary red flag. Before installing or using it: (1) verify the npm package @okx_ai/okx-trade-cli is the official OKX publisher and inspect its npm page and source; (2) prefer using OAuth or a restricted API key (least privilege, trading-only if possible) and never paste keys into chat; (3) inspect ~/.okx/config.toml to see what secrets are stored and where; (4) consider running the CLI and the skill in an isolated environment (container or VM) if you must install globally; (5) ask the publisher/source for a registry/install manifest to reconcile the missing install/credential declarations — the inconsistency should be resolved before trusting the skill.
Capability Analysis
Type: OpenClaw Skill Name: okx-cex-bot Version: 1.3.2 The okx-cex-bot skill bundle is a legitimate tool for managing OKX trading bots (Grid and DCA). The SKILL.md file provides comprehensive instructions for an AI agent, including explicit security guardrails such as forbidding the acceptance of credentials in chat and preventing automatic fund transfers. It utilizes a scoped npm package (@okx_ai/okx-trade-cli) and includes detailed logic for verifying authentication states and trading modes (Live vs. Demo) before execution. No indicators of data exfiltration, malicious persistence, or prompt injection attacks were found.
Capability Tags
cryptorequires-oauth-tokenrequires-sensitive-credentials
Capability Assessment
Purpose & Capability
The skill's purpose (manage OKX Grid/DCA bots) legitimately requires an OKX CLI and API credentials (or OAuth). The registry metadata, however, lists no required binaries, no install spec, and no primary credential, while the SKILL.md frontmatter and body both reference the 'okx' binary and require API credentials. The mismatch between declared registry requirements and the runtime instructions is inconsistent.
Instruction Scope
The instructions direct the agent (or user) to install and run the okx CLI, run commands that reveal and depend on ~/.okx/config.toml and the CLI's auth state, and to perform browser OAuth flows. Reading the local OKX config and using CLI auth state is coherent with the skill's function but those file reads and secrets are not declared in the registry. The guide also references other internal docs (../_shared/preflight.md) and other skills to load, which may affect runtime behavior.
Install Mechanism
There is no install spec in the registry, but the SKILL.md includes frontmatter and instructions to install @okx_ai/okx-trade-cli via npm (-g). This is an active install instruction (global npm install) from a namespaced package — not inherently malicious but the install expectation is undocumented in the registry and should be made explicit. Users should verify the package source and publisher before installing.
Credentials
The skill states 'Requires API credentials' and the runtime commands access local CLI config (~/.okx/config.toml) and OAuth state, yet the registry declares no required env vars or primary credential. That omission is disproportionate: managing bots requires credentials and access to auth config; the registry should declare this explicitly. The instructions correctly warn not to paste credentials in chat, but the skill will rely on locally stored secrets.
Persistence & Privilege
The skill is not marked always:true and is instruction-only with no code files or automatic install in the registry. It does not request elevated persistent privileges in the registry. Runtime behavior will depend on local CLI state but the skill itself does not declare any system-wide persistence.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install okx-cex-bot
  3. After installation, invoke the skill by name or use /okx-cex-bot
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.3.2
okx-cex-bot 1.3.2 changelog: - Adds support for CLI OAuth authentication (browser login flow); updates credential check logic to select between API key and OAuth modes. - Documents new OAuth-based operation flow and mode selection for live/demo environments. - Introduces `okx bot grid amend` command for updating running grid bots’ parameters. - Updates required npm install instructions to specify `@okx_ai/[email protected]`. - Enhances guidance on handling 401/authentication errors via the `okx-cex-auth` skill. - Simplifies credential preflight and clarifies usage patterns for both API key and OAuth users.
v1.3.1
Version 1.3.1 - Metadata version updated to 1.3.1. - No changes to commands, logic, or documentation content. - No file changes detected in this release.
v1.3.0
okx-cex-bot v1.3.0 - Bumped skill version to 1.3.0 in metadata. - No other user-facing changes documented in this release.
v1.2.8
- Version bump from 1.1.0 to 1.2.8 in metadata. - Added "Preflight" section: instructs use of a shared preflight checklist and using the skill version from metadata. - No changes to functionality or CLI commands. - Documentation updated for consistency and centralized setup instructions.
v1.2.7
okx-cex-bot 1.2.7 - No code or file changes in this release. - Skill description and documentation streamlined for conciseness and clarity. - Explicit mention of supported bot types: spot/contract/coin-margined grid, and DCA Martingale (spot/contract). - Added more details regarding bot P&L, TP/SL support, AI parameter suggestions, and margin/investment adjustment capabilities. - Improved and clarified security instructions and flow for credential/profile selection. - No changes to CLI behavior or supported commands.
v1.2.6
okx-cex-bot 1.2.6 - Updated security guidance: the skill now strictly prohibits providing API credentials in chat and instructs users to configure them only via the CLI or by editing config files locally. - Clarified credential setup instructions, emphasizing safe practices and environment variable options. - Streamlined and simplified profile switching and credential setup documentation. - No changes to code or command interface.
v1.2.1
okx-cex-bot 1.2.1 - Updated skill metadata field from `moltbot` to `agent`. - No changes to functionality, code, or CLI usage. - No file or behavioral modifications detected.
v1.2.0
- Clarified that DCA bots are contract-only (no longer covering spot DCA; only leveraged Martingale on futures/swaps). - Updated description and command examples to reflect contract-only restriction for DCA bots. - Minor updates for accuracy in examples (e.g., DCA creation uses contract instruments and leverage). - All instructions and routes for grid bots remain unchanged.
v1.1.9
- Expanded and clarified README/skill documentation in SKILL.md with detailed setup, profile management (live vs demo), credential checks, and error handling. - More explicit rules and user guidance for selecting between live (real funds) and demo (simulated) trading profiles. - Added step-by-step credential setup methods and troubleshooting for authentication failures. - Improved guidance on when to use this skill versus related OKX skills for other functions. - No code changes or functional updates; documentation and usage instructions only.
Metadata
Slug okx-cex-bot
Version 1.3.2
License MIT-0
All-time Installs 5
Active Installs 5
Total Versions 9
Frequently Asked Questions

What is okx-cex-bot?

Manage Grid bots (spot/contract/coin-margined) and DCA Martingale bots (Spot DCA 现货马丁 / Contract DCA 合约马丁) on OKX. Covers create, stop, amend, monitor P&L, T... It is an AI Agent Skill for Claude Code / OpenClaw, with 549 downloads so far.

How do I install okx-cex-bot?

Run "/install okx-cex-bot" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is okx-cex-bot free?

Yes, okx-cex-bot is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does okx-cex-bot support?

okx-cex-bot is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created okx-cex-bot?

It is built and maintained by numpy0001 (@numpy0001); the current version is v1.3.2.

💬 Comments