← Back to Skills Marketplace
ly5201314gjx

binance-trading

by ly5201314gjx · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
389
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install binance-skill-export
Description
Provides Binance API integration for spot and futures trading including balance, orders, market data, leverage, and position management.
README (SKILL.md)

Binance Trading Skill

币安API交易封装,支持现货和合约交易。

功能

现货交易

  • binance_spot_balance - 获取账户余额
  • binance_spot_ticker - 获取24小时行情
  • binance_spot_order - 下单
  • binance_spot_orders - 查询开放订单

合约交易

  • binance_futures_balance - 获取合约账户余额
  • binance_futures_ticker - 获取合约行情
  • binance_futures_order - 合约下单
  • binance_futures_positions - 查询持仓
  • binance_futures_open_orders - 查询合约开放订单
  • binance_futures_book - 深度数据
  • binance_futures_leverage - 设置杠杆
  • binance_futures_close - 平仓

通用

  • binance_ping - 测试连接
  • binance_kline - K线数据

API配置

需要配置以下环境变量或直接在代码中修改:

  • BINANCE_API_KEY - API Key
  • BINANCE_SECRET_KEY - Secret Key

安装

# 安装依赖
npm install

# 测试连接
node index.js ping

使用示例

const binance = require('./index.js');

// 获取余额
await binance.binance_futures_balance({});

// 获取行情
await binance.binance_futures_ticker({ symbol: "BTCUSDT" });

// 下单
await binance.binance_futures_order({
  symbol: "BTCUSDT",
  side: "BUY",
  quantity: 0.001
});

// 设置杠杆
await binance.binance_futures_leverage({
  symbol: "BTCUSDT",
  leverage: 10
});

// 平仓
await binance.binance_futures_close({
  symbol: "BTCUSDT"
});

API Endpoints

类型 地址
现货 https://api.binance.com
合约 https://fapi.binance.com
Usage Guidance
This skill appears to actually implement Binance trading and needs your Binance API key and secret — do not provide full-permission keys blindly. Before installing: (1) Verify the skill source/author; the registry metadata omits the required env vars (BINANCE_API_KEY, BINANCE_SECRET_KEY) and primary credential, so ask the publisher to correct that. (2) Only supply API keys with the minimum permissions needed (prefer keys that allow trading but not withdrawals; or use read-only keys when testing). (3) Consider running the code in a sandbox or on a testnet account (Binance testnet) first — the skill can place real spot/futures orders. (4) Inspect the full index.js (the provided listing was truncated) to confirm there are no hidden network calls or unexpected behaviors. (5) If you do provide keys, store them in environment variables (not embedded in source) and consider restricting agent autonomous use (disable-model-invocation or require explicit user confirmation) so trades cannot be executed without your approval.
Capability Analysis
Type: OpenClaw Skill Name: binance-skill-export Version: 1.0.0 The skill bundle provides a standard implementation for interacting with Binance Spot and Futures APIs. The code in index.js uses Node.js built-in modules (https and crypto) to perform HMAC SHA256 signing and communicate directly with official Binance endpoints (api.binance.com and fapi.binance.com). There is no evidence of data exfiltration, hardcoded credentials, suspicious third-party dependencies, or prompt injection attempts in SKILL.md.
Capability Assessment
Purpose & Capability
The skill's name/description (Binance trading) matches the code and SKILL.md: it calls Binance spot and futures APIs and implements placing orders, balances, positions, leverage, etc. However, the registry metadata declares no required environment variables or primary credential, while both SKILL.md and index.js clearly require BINANCE_API_KEY and BINANCE_SECRET_KEY — this metadata omission is an inconsistency.
Instruction Scope
SKILL.md instructs the user to set BINANCE_API_KEY and BINANCE_SECRET_KEY (or edit code), run npm install and node index.js ping, and shows example function usage. The runtime instructions and code only reference Binance endpoints and the two environment variables; they do not attempt to read unrelated files/paths or exfiltrate data to unexpected endpoints. (Note: the included index.js was truncated in the listing; full file should be reviewed.)
Install Mechanism
There is no install spec that downloads remote code; this is an instruction-only skill with bundled source files. SKILL.md recommends running npm install, but package.json has no dependencies, so no third-party packages are pulled. No external archives or unknown URLs are used in the install process.
Credentials
The skill requires BINANCE_API_KEY and BINANCE_SECRET_KEY to operate (documented in SKILL.md and used by index.js). Those credentials provide trading capability and are highly sensitive. The registry metadata, however, does not declare these required env vars or a primary credential, which is a coherence/visibility problem. Because the skill can place orders and change leverage, only permission-scoped keys (no withdraw) should be used, and the metadata should explicitly declare required credentials.
Persistence & Privilege
The skill is not marked always:true and does not request system config paths. By default disable-model-invocation is false (agent may invoke autonomously) — that is the platform default, but combined with trading capability it means an agent with this skill could place trades autonomously if it obtains API keys. This is expected behaviour for an automated trading skill but a security consideration for users.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install binance-skill-export
  3. After installation, invoke the skill by name or use /binance-skill-export
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of Binance Trading Skill. - Supports both spot and futures trading on Binance. - Provides key functions: balance checks, market data, order management, and leverage settings. - Includes sample commands for account balance, market ticker, placing/canceling orders, and closing positions. - Configuration via BINANCE_API_KEY and BINANCE_SECRET_KEY environment variables. - Installation and test instructions are provided.
Metadata
Slug binance-skill-export
Version 1.0.0
License MIT-0
All-time Installs 1
Active Installs 1
Total Versions 1
Frequently Asked Questions

What is binance-trading?

Provides Binance API integration for spot and futures trading including balance, orders, market data, leverage, and position management. It is an AI Agent Skill for Claude Code / OpenClaw, with 389 downloads so far.

How do I install binance-trading?

Run "/install binance-skill-export" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is binance-trading free?

Yes, binance-trading is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does binance-trading support?

binance-trading is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created binance-trading?

It is built and maintained by ly5201314gjx (@ly5201314gjx); the current version is v1.0.0.

💬 Comments