pionex-trade

Use when the user asks to place orders, cancel orders, check open orders or fills on Pionex. Covers spot orders via `pionex-trade-cli` CLI. Requires API cred...

Before installing or enabling this skill: (1) verify the npm package (@pionex/pionex-ai-kit) and its publisher on the npm registry — confirm it is the official Pionex package (check publisher, repo, and recent activity). (2) Ask the skill author/maintainer to fix metadata: the registry should explicitly declare that the skill requires API credentials or a config path (~/.pionex/config.toml) and whether it will attempt to install software. (3) When trying it, use limited-scope API keys (if Pionex supports separate trade vs read-only scopes) and enable IP whitelisting; test with read-only operations first. (4) Ensure the agent enforces the documented dry-run + explicit user confirmation flow for any write operation; do not allow the agent to place live orders without your explicit consent each time. (5) If you cannot verify the npm package or the publisher, inspect the package contents or prefer a vetted client/official plugin. The current metadata/instruction mismatch is the primary red flag — resolve that before handing over credentials or installing the CLI.

Type: OpenClaw Skill Name: pionex-trade Version: 1.0.0 The pionex-trade skill is a legitimate tool for managing spot orders on the Pionex exchange via the pionex-trade-cli. The SKILL.md instructions prioritize safety by enforcing explicit user confirmation, recommending dry-runs for all write operations, and requiring balance checks before placing orders to prevent overdrafts. No evidence of data exfiltration, malicious execution, or prompt injection was found; the skill's behavior is strictly aligned with its stated purpose of trading.