← Back to Skills Marketplace
Moltrade 1.0.9
by
zhouhuihui008
· GitHub ↗
· v1.0.0
· MIT-0
87
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install moltrade-1-0-9
Description
Operate the Moltrade trading bot (config, backtest, test-mode runs, Nostr signal broadcast, exchange adapters, strategy integration) in OpenClaw.
Usage Guidance
Before installing or using this skill, consider the following: 1) The bot requires sensitive credentials (exchange API keys, Nostr private key) but the skill metadata doesn’t declare them — expect the agent to prompt you for secrets at runtime. 2) Never paste private wallet keys; follow the SKILL.md advice to run initialization yourself and keep private keys local. 3) If asked to provide API keys, prefer testnet keys first, minimize permissions (no withdrawals), and enable IP whitelisting on exchange accounts. 4) Ask where and how the agent will store API keys (encrypted system keyring vs plain file). If the agent cannot explain, do not provide keys. 5) Inspect the cloned repository and requirements.txt before running pip or main.py (run in an isolated environment or VM). 6) For live trading, run extensive tests in test mode and review logs; do not allow the agent to autonomously switch to live without explicit, manual approval. 7) If you need a simpler, lower-risk interaction, use only the documented read-only features (backtest with redacted config) and avoid giving credentials to the agent.
Capability Analysis
Type: OpenClaw Skill
Name: moltrade-1-0-9
Version: 1.0.0
The skill bundle provides instructions for 'Moltrade,' an automated trading bot with support for Binance, Uniswap, and Polymarket. The instructions are highly security-conscious, explicitly directing the AI agent to never handle private keys, to mask API keys in all outputs, and to require explicit user confirmation ('CONFIRM') before executing live trades (SKILL.md, binance/spot/SKILL.md). The bundle includes detailed API documentation and agent behavior guidelines that align with the stated purpose of trading and social signal broadcasting. No evidence of data exfiltration, malicious execution, or prompt injection was found across the core files or the Binance Square integration (binance/square-post/SKILL.md).
Capability Assessment
Purpose & Capability
Name/description match the instructions: it’s an operator guide for a Python trading bot and correctly requires python/pip. However, the bot’s functionality clearly needs exchange API keys and Nostr private keys, yet the skill metadata declares no required env vars/credentials — a partial mismatch between claimed capability and declared requirements.
Instruction Scope
SKILL.md instructs the agent about installing, backtesting, test/live runs and broadcasting signals. It explicitly tells the agent not to handle wallet private keys and to ask the user to run `python main.py --init` themselves, which is good. But other parts (especially the included binance/square-post sub-skill docs) say the agent will prompt for API keys and 'store' them securely — that expands the agent’s scope into collecting and persisting sensitive secrets without the skill declaring how/where that happens.
Install Mechanism
Instruction-only skill with no install spec or embedded executables. It references cloning the public GitHub repo and running pip install for requirements and third-party packages (e.g., binance-sdk-spot). These are expected for this use case and are low-risk from the skill packaging perspective, but the user should still vet upstream packages and the repo code before executing.
Credentials
Operating the bot requires multiple sensitive credentials (Binance API key/secret, Square OpenAPI key, Nostr nsec/private key, possibly exchange testnet/mainnet toggles), but requires.env and primary credential are empty. That omission is disproportionate and ambiguous — the skill may prompt for keys at runtime or persist them, but it does not declare or limit which secrets it will request or where they will be stored.
Persistence & Privilege
always:false and no install-time persistence are appropriate. However the documentation suggests the agent may 'store' API keys for later use (binance/square-post text), creating potential persistent credentials associated with the agent. Autonomous invocation is allowed (platform default) and would increase risk if credentials are later supplied and stored.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install moltrade-1-0-9 - After installation, invoke the skill by name or use
/moltrade-1-0-9 - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Moltrade 1.0.0 — Initial Release
- Launches a decentralized, automated trading bot for OpenClaw, with support for strategy execution, copy trading, and encrypted signal sharing via Nostr.
- Features local key self-hosting for improved user security—no keys leave your machine.
- Enables one-click copy trading, OpenClaw strategy integration, and seamless config management.
- Adds Binance Spot exchange support via the binance-sdk-spot adapter.
- Supports backtesting, test/live trading modes, and encrypted signal broadcasting.
- Comprehensive setup, config, and usage documentation included.
Metadata
Frequently Asked Questions
What is Moltrade 1.0.9?
Operate the Moltrade trading bot (config, backtest, test-mode runs, Nostr signal broadcast, exchange adapters, strategy integration) in OpenClaw. It is an AI Agent Skill for Claude Code / OpenClaw, with 87 downloads so far.
How do I install Moltrade 1.0.9?
Run "/install moltrade-1-0-9" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Moltrade 1.0.9 free?
Yes, Moltrade 1.0.9 is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Moltrade 1.0.9 support?
Moltrade 1.0.9 is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Moltrade 1.0.9?
It is built and maintained by zhouhuihui008 (@zhouhuihui008); the current version is v1.0.0.
More Skills