← 返回 Skills 市场
asterskillagent

Aster-Skill

作者 AsterSkill · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
369
总下载
1
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install aster-skill
功能描述
Monitors crypto news for BTC, ETH, SOL, BNB; classifies sentiment; and executes leveraged long/short orders on Aster with risk controls.
使用说明 (SKILL.md)

crypto-news-trader\r

\r A Clawhub skill that:\r

  1. Monitors a Twitter/news stream via OpenNews MCP (aka “6551 news monitoring skill”).\r
  2. Classifies news for BTC / ETH / SOL / BNB as bullish / bearish / neutral using an LLM prompt.\r
  3. Executes long (BUY) or short (SELL) orders on Aster via aster-skill client.\r \r

Strategy Logic\r

\r

Step 1 — News Monitoring (OpenNews MCP)\r

  • Pull latest news (last 1 hour) from configured sources (Twitter + major crypto media).\r
  • Filter to only BTC/ETH/SOL/BNB-related stories.\r
  • Deduplicate by article id (24h cache).\r \r

Step 2 — Bullish/Bearish Decision\r

  • LLM analyzes:\r
    • source credibility\r
    • event importance\r
    • timeliness\r
    • market sensitivity\r
  • Outputs strict JSON:\r
    • sentiment: bullish | bearish | neutral\r
    • confidence: 0..1\r
    • signal_strength: strong | medium | weak\r
    • recommended_action: open_long | open_short | wait | skip\r \r Trade rules:\r
  • Only trade if:\r
    • confidence >= 0.70\r
    • signal_strength != weak\r
  • Open long if sentiment=bullish and confidence >= 0.65\r
  • Open short if sentiment=bearish and confidence >= 0.65\r
  • Otherwise wait/skip.\r \r

Step 3 — Order Execution on Aster\r

  • Set leverage (default 5x)\r
  • Place MARKET order\r
  • Attach stop-loss / take-profit\r
  • Per-coin cooldown (default 30 minutes)\r \r

Requirements\r

\r

Install OpenNews MCP (6551)\r

This skill declares the MCP in skill.json, and expects it to be installed via:\r \r

npx clawhub install opennews-mcp
安全使用建议
This skill implements an autonomous trading bot and requires your Aster exchange API keys and your OpenAI key. That is coherent for the feature, but it is high-risk to give these secrets to an unvetted skill with no homepage or known publisher. Before installing: (1) Review source of @asterdex/aster-skills-hub and opennews-mcp packages (audit code, pin versions); (2) Use an exchange API key that has no withdrawal permissions and limited trade permissions and set small position sizes or use sandbox/testnet keys first; (3) Consider running manually (disable scheduled/autonomous runs) or require human confirmation for order execution; (4) Limit OpenAI usage or use a dedicated key, and be aware article content is sent to OpenAI; (5) Monitor logs and have a plan to revoke credentials quickly if unexpected trades occur. If you cannot audit the dependent npm/MCP packages and the Aster client, treat this skill as risky and avoid providing real exchange credentials.
功能分析
Type: OpenClaw Skill Name: aster-skill Version: 1.0.0 The skill is a crypto trading bot that executes trades on the Aster exchange based on LLM-analyzed news sentiment. It is classified as suspicious due to a prompt injection vulnerability in 'crypto-news-trader-index.js', where unsanitized news content from external sources (Twitter, news sites) is directly embedded into the LLM prompt, potentially allowing attackers to manipulate trading decisions. Additionally, 'crypto-news-trader-skill.json' contains an unusual MCP server configuration that runs an installation command ('npx clawhub install') rather than a standard service execution command, which is a risky pattern for automated agents.
能力评估
Purpose & Capability
The name/description (monitor news, classify sentiment, place leveraged orders on Aster) matches the code: it uses an OpenNews client, OpenAI for classification, and an Aster client to place orders. The skill.json declares OPENAI and ASTER credentials and an optional Twitter token which are appropriate for the stated purpose. Minor inconsistency: the registry summary at the top of the report stated 'Required env vars: none' while the included crypto-news-trader-skill.json explicitly requires ASTER_API_KEY, ASTER_API_SECRET, and OPENAI_API_KEY.
Instruction Scope
SKILL.md and the code stick to the described flow: fetch news via OpenNews MCP, format and send articles to OpenAI, interpret the JSON response, and place MARKET orders on Aster with stop-loss/take-profit and cooldowns. The skill sends article content (titles, excerpts, URLs, engagement metrics) to OpenAI — expected for the classifier but note this transmits potentially sensitive or proprietary text to OpenAI.
Install Mechanism
The published package is instruction-first but includes source that imports third-party npm packages (@asterdex/aster-skills-hub, opennews-mcp, openai). crypto-news-trader-skill.json declares an MCP install via 'npx clawhub install opennews-mcp', which will fetch and execute remote code. There is no clear, verifiable upstream homepage or release provenance for these modules in the skill metadata. Installing arbitrary npm/MCP packages is moderate-to-high risk unless packages are audited and pinned to known safe versions.
Credentials
The environment variables required by the skill.json (ASTER_API_KEY, ASTER_API_SECRET, OPENAI_API_KEY, optional TWITTER_BEARER_TOKEN) are consistent with its functionality. These are highly sensitive credentials (especially exchange API keys). The skill does not request unrelated credentials, but granting these keys to an unvetted skill carries financial and privacy risk. The code uses a default Aster base URL (https://api.asterdex.com) and does not attempt to exfiltrate secrets, but users should limit key permissions (e.g., disable withdrawals) and consider testnet keys.
Persistence & Privilege
The skill.json includes a schedule ('*/5 * * * *'), so it is intended to run automatically every 5 minutes and may execute trades without manual approval. While 'always' is false, autonomous scheduled invocation plus exchange keys means the skill can repeatedly act on the user's account — a high blast radius if the skill or its dependencies are malicious or buggy. The skill does not modify other skills or system settings.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install aster-skill
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /aster-skill 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release of crypto-news-trader skill: - Monitors Twitter and crypto media news via OpenNews MCP, focusing on BTC, ETH, SOL, and BNB. - Classifies news as bullish, bearish, or neutral using LLM with attention to credibility, importance, timeliness, and market sensitivity. - Automatically places long or short orders on Aster based on sentiment, confidence, and signal strength. - Supports per-coin trade cooldown and default leverage with stop-loss/take-profit management. - Requires installation of OpenNews MCP 6551 for news monitoring integration.
元数据
Slug aster-skill
版本 1.0.0
许可证
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Aster-Skill 是什么?

Monitors crypto news for BTC, ETH, SOL, BNB; classifies sentiment; and executes leveraged long/short orders on Aster with risk controls. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 369 次。

如何安装 Aster-Skill?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install aster-skill」即可一键安装,无需额外配置。

Aster-Skill 是免费的吗?

是的,Aster-Skill 完全免费(开源免费),可自由下载、安装和使用。

Aster-Skill 支持哪些平台?

Aster-Skill 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Aster-Skill?

由 AsterSkill(@asterskillagent)开发并维护,当前版本 v1.0.0。

💬 留言讨论