← Back to Skills Marketplace
362
Downloads
0
Stars
6
Active Installs
1
Versions
Install in OpenClaw
/install spot
Description
Binance Spot request using the Binance API. Authentication requires API key and secret key. Supports testnet and mainnet.
Usage Guidance
This skill appears to be a straightforward Binance Spot API instruction set, but its manifest is incomplete. Before installing or using it: (1) don't provide your mainnet API key/secret until the author fixes the manifest to explicitly declare required credentials and binaries; (2) prefer creating a testnet key or a restricted mainnet key (trading-only, withdrawals disabled, IP whitelist) and test there first; (3) ask the publisher to add required env vars (e.g., BINANCE_API_KEY, BINANCE_SECRET) and to document how/where keys are stored or transmitted; (4) confirm that the agent will not log or transmit keys to third-party endpoints and that keys are not persisted by the skill; (5) if you must proceed, rotate keys after testing. If the author cannot clarify why the manifest omits credentials/binaries, treat the skill as untrusted for real funds.
Capability Analysis
Type: OpenClaw Skill
Name: spot
Version: 0.1.0
The skill bundle provides a legitimate interface for the Binance Spot API, including comprehensive documentation for authenticated endpoints. It contains explicit safety instructions for the AI agent in SKILL.md, such as masking API keys in output and requiring explicit user confirmation ('CONFIRM') before executing mainnet transactions. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found; the logic is consistent with its stated purpose of facilitating cryptocurrency trading.
Capability Assessment
Purpose & Capability
The SKILL.md clearly describes authenticated Binance Spot requests that require an API key and secret. However the registry metadata declares no required environment variables, no primary credential, and no required binaries. A Binance trading skill would reasonably declare at least the API key and secret (or a primaryEnv) and note dependencies such as curl/openssl or a HTTP client. This mismatch is incoherent.
Instruction Scope
The instructions are focused on Binance endpoints and include examples for signing requests and sending them (curl + openssl examples). They do not instruct reading unrelated local files or exfiltrating data to other endpoints. That said, because the skill is instruction-only, the agent will need to collect API credentials at runtime (not declared in the manifest), which may lead to ad-hoc handling of secrets unless constrained.
Install Mechanism
Instruction-only skill with no install spec and no code files — low installation risk. Nothing is downloaded or written to disk by the skill itself.
Credentials
Authenticated endpoints require an API key and secret; the SKILL.md and references explicitly describe using them, yet the manifest lists no required env vars or primary credential. Additionally, examples rely on curl and openssl but those binaries are not declared. The absence of declared credentials and binaries is disproportionate to the skill's needs and reduces transparency about where secrets are supplied or stored.
Persistence & Privilege
The skill does not request always:true and is not installing persistent components. It is user-invocable and can be invoked autonomously (platform default), which is expected. No evidence it modifies other skills or system-wide settings.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install spot - After installation, invoke the skill by name or use
/spot - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.0
Initial release of the Binance Spot skill.
- Provides authenticated access to Binance Spot API endpoints.
- Supports both testnet and mainnet environments with API key/secret authentication.
- Returns API results in JSON format.
- Includes a comprehensive quick reference table of supported endpoints and required parameters.
Metadata
Frequently Asked Questions
What is Spot?
Binance Spot request using the Binance API. Authentication requires API key and secret key. Supports testnet and mainnet. It is an AI Agent Skill for Claude Code / OpenClaw, with 362 downloads so far.
How do I install Spot?
Run "/install spot" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Spot free?
Yes, Spot is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Spot support?
Spot is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Spot?
It is built and maintained by Awessh (@awessh); the current version is v0.1.0.
More Skills