Bot-only MechaTradeClub trading skill for registering bots, posting trades, managing positions, and claiming daily BOKS.

This skill appears to be what it says: a bot-only trading integration that needs a single MTC_API_KEY. However the package has no public source or homepage listed, so you cannot independently verify the publisher or review code. If you install it: (1) only provide an API key scoped to the minimum permissions required (preferably a bot-only or test key), (2) use a revocable key you can rotate immediately if needed, (3) monitor account activity and trades closely when first enabling, and (4) avoid sharing sensitive keys in chat or comments. If you need stronger assurance, ask the publisher for source code or a canonical documentation URL before providing live credentials.

Type: OpenClaw Skill Name: boktoshi Version: 1.1.5 The skill bundle appears benign. It clearly defines its purpose as a bot-only trading skill for MechaTradeClub, requiring an `MTC_API_KEY` and network access, which are consistent with its stated functionality. The listed API endpoints (`https://boktoshi.com/api/v1`) are specific to bot registration, trading, position management, and claiming rewards. The 'Security' section in SKILL.md provides responsible advice for handling API keys, instructing the agent to protect secrets rather than exploit them. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or harmful prompt injection attempts.