功能描述

Binance Dollar-Cost Averaging (DCA) tool for automated and manual recurring crypto purchases. Use when the user wants to plan DCA strategies, execute recurring buys on Binance, check DCA projections, view trade history, or manage a systematic buying schedule for any trading pair (BTC/USDT, ETH/USDT, etc). Triggers on requests about DCA, recurring buys, cost averaging, accumulation strategies, or Binance spot purchases.

使用说明 (SKILL.md)

Binance DCA

Name: Binance DCA Test
Author: fpsjago

Execute and plan Dollar-Cost Averaging strategies on Binance.

Setup

Requires two environment variables (never hardcode these):

export BINANCE_API_KEY="your-key"
export BINANCE_SECRET_KEY="your-secret"

Optional: BINANCE_BASE_URL (defaults to https://api.binance.com). Use https://testnet.binance.vision for paper trading.

Quick Start

# Check current BTC price
bash scripts/dca.sh price BTCUSDT

# Project a DCA plan: $50 every 7 days, 12 buys
bash scripts/dca.sh plan 50 7 12 BTCUSDT

# Execute a $50 market buy
bash scripts/dca.sh buy BTCUSDT 50

# Check recent trades
bash scripts/dca.sh history BTCUSDT 10

# Check USDT balance
bash scripts/dca.sh balance USDT

Actions

price [SYMBOL]

Get current spot price. Default: BTCUSDT.

balance [ASSET]

Check free and locked balance for an asset. Default: USDT.

buy SYMBOL AMOUNT [TYPE] [PRICE]

Place a buy order. AMOUNT is in quote currency (USDT).

MARKET (default): Execute immediately at market price
LIMIT: Requires price parameter — buy BTCUSDT 50 LIMIT 95000

history [SYMBOL] [LIMIT]

Show recent trades with timestamps, side, quantity, price, and fees.

plan [AMOUNT] [FREQ_DAYS] [NUM_BUYS] [SYMBOL]

Project a DCA plan with scenario analysis showing PnL at different price levels (-30% to +100%). Defaults: $50, every 7 days, 12 buys, BTCUSDT.

DCA Strategy Guidance

When helping users plan DCA:

Ask about budget — How much per buy, and how often?
Set expectations — DCA smooths volatility, not guaranteed profit
Run projections — Use plan to show scenarios before committing
Recommend testnet first — Set BINANCE_BASE_URL=https://testnet.binance.vision
Position sizing — Suggest 1-2% of portfolio per buy for conservative approach
Never store credentials — Always use environment variables

Scheduling DCA Buys

For automated recurring buys, suggest setting up a cron job or OpenClaw cron:

# Example: buy $50 BTC every Monday at 9am UTC
0 9 * * 1 BINANCE_API_KEY=... BINANCE_SECRET_KEY=... /path/to/dca.sh buy BTCUSDT 50

Or via OpenClaw cron for agent-managed scheduling with alerts and confirmations.

Error Handling

Missing API keys → clear error message with setup instructions
Invalid amounts → validation before API call
API failures → descriptive error with endpoint info
Always verify the order response status before confirming to user

安全使用建议

Do not install or run this skill as-is. Key issues: (1) the SKILL.md expects scripts (scripts/dca.sh) that are not included — ask the publisher for the missing code or a reference to a trusted repo; (2) the metadata does not declare the BINANCE_API_KEY and BINANCE_SECRET_KEY even though the runtime requires them — this mismatch is a red flag about quality/trust; (3) the cron example shows embedding API keys inline (insecure) and the doc suggests agent-managed scheduling, which would let the agent perform autonomous buys if it stores credentials. Before proceeding, request from the publisher: the source code or a trustworthy homepage, an install spec or included scripts, an explicit list of required env vars declared in metadata, and a clear statement of the minimum Binance API permissions needed (recommend trade-only, no withdrawal), plus guidance on secret storage (use secrets manager or OS-level protected env, do not paste keys into crontab). Always test with a testnet key (BINANCE_BASE_URL=https://testnet.binance.vision) and with tightly-scoped API keys and IP whitelisting. If the publisher cannot provide these, treat the skill as incomplete/untrusted.

功能分析

Type: OpenClaw Skill Name: Developer: Version: Description: OpenClaw Agent Skill The provided skill bundle content (`_meta.json` and `SKILL.md`) is benign. The `SKILL.md` documentation outlines a Binance DCA tool, requiring API keys for its functionality, which is expected for a trading application. Crucially, it provides responsible instructions for the AI agent, such as recommending environment variables for credentials ('Never store credentials'), suggesting testnet usage, and guiding on secure error handling. There are no indications of prompt injection attempts, data exfiltration, malicious execution, or persistence mechanisms within the analyzed files. The skill refers to an external script (`scripts/dca.sh`) which was not provided for analysis, but the instructions for its use are not malicious.

能力评估

⚠ Purpose & Capability

The stated purpose (Binance DCA) legitimately requires Binance API credentials and network calls to the Binance API. However the skill metadata declares no required environment variables or binaries while the SKILL.md explicitly requires BINANCE_API_KEY and BINANCE_SECRET_KEY and presumes a scripts/dca.sh script. That mismatch (no code files, no declared env) is inconsistent.

⚠ Instruction Scope

SKILL.md tells the agent/user to run bash scripts (scripts/dca.sh) for price, plan, buy, history, balance and to set env vars. Yet there are no code files in the skill bundle — the instructions reference local scripts that do not exist in the package. The instructions also include an insecure cron example that embeds API keys inline, and suggest using OpenClaw cron for agent-managed scheduling (which implies persistent access to credentials).

⚠ Install Mechanism

There is no install specification (instruction-only), which by itself is low-risk. But because the instructions expect local scripts to exist, the absence of any code or install steps is a substantive coherence problem: either the package is incomplete or it expects external artifacts not provided by the skill.

⚠ Credentials

Requesting Binance API key and secret is appropriate for a Binance trading tool, but the registry metadata did not declare these required env vars. The SKILL.md both warns 'Never store credentials' and then demonstrates embedding keys directly in a cron line — a contradictory and insecure recommendation. The skill does not state the minimal API permissions required (e.g., trading but not withdrawals) or recommend IP whitelisting.

ℹ Persistence & Privilege

The skill is not marked always:true, so it won't be forced into every agent run. However SKILL.md explicitly recommends scheduling recurring buys via cron or 'OpenClaw cron' (agent-managed scheduling). If the agent is granted persistent scheduling and stored credentials, that increases risk (autonomous recurring trades). The metadata does not clarify how scheduling or credential storage would be handled.

版本历史

v0.0.1

test

元数据

Slug binance-dca-test

版本 0.0.1

许可证 —

累计安装 0

当前安装数 0

历史版本数 1

常见问题

Binance DCA Test 是什么？

Binance Dollar-Cost Averaging (DCA) tool for automated and manual recurring crypto purchases. Use when the user wants to plan DCA strategies, execute recurring buys on Binance, check DCA projections, view trade history, or manage a systematic buying schedule for any trading pair (BTC/USDT, ETH/USDT, etc). Triggers on requests about DCA, recurring buys, cost averaging, accumulation strategies, or Binance spot purchases. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 1448 次。

如何安装 Binance DCA Test？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install binance-dca-test」即可一键安装，无需额外配置。

Binance DCA Test 是免费的吗？

是的，Binance DCA Test 完全免费（开源免费），可自由下载、安装和使用。

Binance DCA Test 支持哪些平台？

Binance DCA Test 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。

谁开发了 Binance DCA Test？

由 fpsjago（@fpsjago）开发并维护，当前版本 v0.0.1。

Binance DCA Test