← 返回 Skills 市场
tech-fe-aiusd

aiusd-pro

作者 tech@aiusd · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
244
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install aiusd-pro
功能描述
AIUSD Pro — AI-powered trading agent with built-in reasoning. Use when user wants to trade, check balances, or manage positions through natural language conv...
使用说明 (SKILL.md)

AIUSD Pro

Chat with AIUSD using natural language. This skill delegates to a backend AI agent — you do NOT need to understand AIUSD internals or construct specific commands.

CLI entry point

All commands in this skill use npx -y aiusd-pro as the CLI prefix. This works without any global installation — npx resolves the package from npm automatically.

If aiusd-pro is already in PATH (via npm install -g aiusd-pro), you may use aiusd-pro directly instead.

When to use

Use when the user wants anything related to AIUSD or trading through natural conversation. Examples:

  • "What are my balances?"
  • "Buy 100 USDC worth of SOL"
  • "Stake 500 AIUSD"
  • "Long ETH 5x on HyperLiquid"
  • "Show trending tokens"

Authentication

If npx -y aiusd-pro send fails with auth error, run login:

  1. npx -y aiusd-pro login --browser → prints JSON with url and session_id
  2. Send the url to the user (NEVER fabricate it)
  3. npx -y aiusd-pro login --poll-session \x3Csession_id> → waits for sign-in

Usage

Send a message (background mode)

Backend agent operations take 10-300 seconds (tool calls, reasoning, trading, transaction confirmation). Always use background mode to avoid exec timeout cutting off output:

bash background:true command:"npx -y aiusd-pro send 'user request here'"

Returns a sessionId. Then poll for completion and retrieve output:

process action:poll sessionId:\x3Cid>
process action:log sessionId:\x3Cid>

Complete pattern:

  1. Start: bash background:true command:"npx -y aiusd-pro send 'What are my balances?'" → returns sessionId: abc123
  2. Wait & poll: process action:poll sessionId:abc123 → returns running or exited
  3. Get output: process action:log sessionId:abc123 → returns the agent's full response text
  4. Relay output to user as-is

Multi-turn conversation

Session context is maintained automatically across send calls. The backend agent remembers all previous messages in the session.

Confirmation flow example:

  1. bash background:true command:"npx -y aiusd-pro send 'Buy 100 USDC worth of SOL'"
  2. Poll + log → agent responds: "Will buy ~0.65 SOL at $153. Confirm?"
  3. Relay to user, user says "yes"
  4. bash background:true command:"npx -y aiusd-pro send 'yes'"
  5. Poll + log → agent responds: "Done. TX: abc123..."
  6. Relay to user

Follow-up questions work the same way — just send the user's response. The backend has full conversation history.

To start a fresh conversation:

bash command:"npx -y aiusd-pro session reset"

Cancel

bash command:"npx -y aiusd-pro cancel"

Session management

bash command:"npx -y aiusd-pro session new"
bash command:"npx -y aiusd-pro session list"
bash command:"npx -y aiusd-pro session reset"

Rules

  1. Always use background:true for send — agent responses take 10-300s.
  2. Pass user intent as natural language — do NOT interpret or construct specific trading commands.
  3. Backend agent handles all domain knowledge, tool selection, and multi-step reasoning.
  4. Relay stdout to user as-is — already formatted for humans. The output includes a browser link at the end (e.g. https://aiusd.ai/chat/\x3Csession-id>). Always include this link when relaying the response — it lets browser-login users continue the conversation in the web UI.
  5. If response asks for confirmation or more info, relay to user, then send their reply back (same session, same pattern).
  6. Run commands sequentially — only one active send per session.
  7. Short commands (session reset, cancel, login) can run foreground (no background:true needed).
安全使用建议
This skill functions by invoking 'npx -y aiusd-pro', which downloads and runs an npm package at runtime — a significant supply-chain risk. Before installing or using it: verify the npm package and its source repository/homepage, review the package code (or prefer a vetted binary), avoid providing private keys or wallet seeds, run the CLI in a sandboxed environment if possible, and confirm what the backend will do with your account/session data. If you cannot verify the package origin, treat it as untrusted and do not use it for real trading or with any real funds.
功能分析
Type: OpenClaw Skill Name: aiusd-pro Version: 1.0.0 The skill instructions in SKILL.md direct the AI agent to execute shell commands by wrapping raw user input in single quotes (e.g., `npx -y aiusd-pro send 'user request here'`), which is a classic shell injection vulnerability. Furthermore, the skill relies on `npx -y` to fetch and execute code from the npm registry at runtime, introducing a supply chain risk. While these patterns are likely intended for functionality, the lack of input sanitization and the execution of unverified remote code are high-risk behaviors.
能力评估
Purpose & Capability
Name/description (AI trading CLI) aligns with requiring node and using a CLI. However the package provenance is missing (no homepage/source) and the registry owner is unknown — for a financial/trading tool that matters for trust.
Instruction Scope
Runtime instructions tell the agent to run npx -y aiusd-pro commands, always relay stdout 'as-is' including a browser link, and run long-running background tasks. This delegates trading decisions and execution to a remote backend and asks the agent to expose returned links and outputs verbatim — increasing chance of leaking sensitive data or following untrusted links.
Install Mechanism
There is no install spec, but the SKILL.md explicitly uses npx -y aiusd-pro, which downloads and executes code from the npm registry at runtime. That is a high-risk dynamic install (supply-chain/execution of unvetted code), especially given no homepage or repo to audit.
Credentials
The skill declares no required environment variables or credentials, which is proportionate on its face. But a trading tool will likely require browser-based authentication or wallet connections at runtime — the instructions rely on a login flow (browser + session_id) without clarifying what credentials or keys may be exposed to the backend.
Persistence & Privilege
always:false and no install/write steps are declared. The skill does not request persistent system privileges. It can run autonomously (platform default), which increases blast radius but is not by itself a disqualifying issue.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install aiusd-pro
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /aiusd-pro 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
AIUSD Pro v1.0.1 - Added SKILL.md with comprehensive documentation and usage instructions. - Clarified natural language usage for trading, account management, and queries. - Detailed authentication, session, and background process handling guidance. - Included explicit rules for relaying user input and agent output. - Described multi-turn conversation patterns and session management commands.
元数据
Slug aiusd-pro
版本 1.0.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

aiusd-pro 是什么?

AIUSD Pro — AI-powered trading agent with built-in reasoning. Use when user wants to trade, check balances, or manage positions through natural language conv... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 244 次。

如何安装 aiusd-pro?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install aiusd-pro」即可一键安装,无需额外配置。

aiusd-pro 是免费的吗?

是的,aiusd-pro 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

aiusd-pro 支持哪些平台?

aiusd-pro 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 aiusd-pro?

由 tech@aiusd(@tech-fe-aiusd)开发并维护,当前版本 v1.0.0。

💬 留言讨论