← Back to Skills Marketplace
Apex
by
TobeyRebecca
· GitHub ↗
· v1.0.0
· MIT-0
77
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install toby-apex
Description
Trade and monitor ApeX perpetual futures. Check balances, view positions with P&L, place/cancel orders, execute market trades, or submit trade reward enrollm...
Usage Guidance
This skill is functionally a trading client and needs full ApeX API credentials plus an Omni seed (used as a signing key). Before installing or running it: 1) Do not upload your real Omni seed or full-permission API keys to unknown services; keep them local. 2) Verify the source of the apexomni-connector-node package (check its repository/release page) — it is an alpha version in package.json and could be unreviewed. 3) Use API keys with restricted permissions (no withdrawal) and test first on testnet (APEX_TESTNET=1). 4) Inspect the connector package and skill code yourself (or have someone audit it) before running npm install. 5) Be aware the skill will write a trading-state.json file in the skill directory containing positions and account size; if that is sensitive, run in a sandboxed environment. 6) Because registry metadata does not declare the required env vars, expect manual configuration and treat that omission as a red flag — confirm credential handling and storage policies before trusting the skill to execute trades.
Capability Analysis
Type: OpenClaw Skill
Name: toby-apex
Version: 1.0.0
The skill bundle provides legitimate trading and portfolio management functionality for the ApeX perpetual futures exchange. It utilizes the 'apexomni-connector-node' SDK to perform public market data lookups and private trading operations. Sensitive credentials, including the ApeX API keys and the Omni seed, are handled via environment variables and kept local to the execution environment as per the documentation in SKILL.md. While the skill includes a default reward enrollment ID (300001) triggered by specific user phrases, this appears to be a standard affiliate or contest enrollment mechanism rather than a malicious exploit. No evidence of data exfiltration, unauthorized remote execution, or harmful prompt injection was found across the analyzed files (apex.mjs, check-positions.mjs, and SKILL.md).
Capability Tags
Capability Assessment
Purpose & Capability
Name/description and the included scripts (apex.mjs, analyze-market.mjs, etc.) are coherent with an ApeX trading/monitoring skill. However the package requires API keys and an Omni seed for private operations while the registry metadata lists no required environment variables — an inconsistency that may confuse users and lead them to unknowingly supply sensitive secrets.
Instruction Scope
SKILL.md clearly limits runtime actions to market data queries, account queries, and order operations via the Apex SDK and CoinGecko. It instructs interactive confirmations before trade execution and explicitly warns not to share the Omni seed. The scripts read/write a local trading-state.json inside the skill and call only the listed APIs; there are no obvious commands that read unrelated system files or exfiltrate data to unexpected endpoints.
Install Mechanism
There is no formal install spec, but SKILL.md instructs users to run npm install in the scripts folder. That will pull multiple npm packages including an 'apexomni-connector-node' package at version 0.3.2-alpha.1 (an alpha release). Installing packages from npm (especially an alpha/unreviewed connector) increases risk compared to an instruction-only skill — review the connector package source before installing.
Credentials
The runtime requires highly sensitive secrets (APEX_API_KEY, APEX_API_SECRET, APEX_API_PASSPHRASE, APEX_OMNI_SEED). Those are appropriate for trading functionality, but the registry metadata does not declare them (required env vars: none, primary credential: none). The omission is a significant transparency problem: users may not realize they must provide private keys/seeds when enabling the skill.
Persistence & Privilege
The skill does not request elevated platform privileges or always: true. It writes a local trading-state.json (in the skill folder) to persist last checks and positions — normal for a trading helper but worth noting because it stores account and position data locally. Autonomous invocation is allowed by default (disable-model-invocation: false), which combined with access to live trading credentials increases risk if the endpoint is misused.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install toby-apex - After installation, invoke the skill by name or use
/toby-apex - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release
Metadata
Frequently Asked Questions
What is Apex?
Trade and monitor ApeX perpetual futures. Check balances, view positions with P&L, place/cancel orders, execute market trades, or submit trade reward enrollm... It is an AI Agent Skill for Claude Code / OpenClaw, with 77 downloads so far.
How do I install Apex?
Run "/install toby-apex" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Apex free?
Yes, Apex is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Apex support?
Apex is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Apex?
It is built and maintained by TobeyRebecca (@tobeyrebecca); the current version is v1.0.0.
More Skills