← 返回 Skills 市场
ai-chen2050

binance square 币安广场

作者 ai-chen2050 · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
381
总下载
0
收藏
2
当前安装
1
版本数
在 OpenClaw 中安装
/install binance-square-post
功能描述
Post content to Binance Square (Binance social platform for sharing trading insights). Auto-run on messages like 'post to square', 'square post'. Supports pu...
使用说明 (SKILL.md)

Square Post Skill

Overview

Post text content to Binance Square.


API: Add Content

Method: POST

URL:

https://www.binance.com/bapi/composite/v1/public/pgc/openApi/content/add

Request Headers:

Header Required Description
X-Square-OpenAPI-Key Yes Square OpenAPI Key
Content-Type Yes application/json
clienttype Yes binanceSkill

Request Body:

Field Type Required Description
bodyTextOnly string Yes Post content text (supports #hashtags)

Example Request

curl -X POST 'https://www.binance.com/bapi/composite/v1/public/pgc/openApi/content/add' \
  -H 'X-Square-OpenAPI-Key: your_api_key' \
  -H 'Content-Type: application/json' \
  -H 'clienttype: binanceSkill' \
  -d '{
    "bodyTextOnly": "BTC looking bullish today!"
  }'

Response Example

{
  "code": "000000",
  "message": null,
  "data": {
    "id": "content_id_here"
  }
}

Response Fields

Field Type Description
code string "000000" = success
message string Error message (null on success)
data.id string Created content ID

Post URL Format

On success, construct the post URL:

https://www.binance.com/square/post/{id}

Example: If data.id is 298177291743282, the post URL is:

https://www.binance.com/square/post/298177291743282

Error Handling

Code Description
000000 Success
10004 Network error. Please try again
10005 Only allowed for users who have completed identity verification
10007 Feature unavailable
20002 Detected sensitive words
20013 Content length is limited
20020 Publishing empty content is not supported
20022 Detected sensitive words (with risk segments)
20041 Potential security risk with the URL
30004 User not found
30008 Banned for violating platform guidelines
220003 API Key not found
220004 API Key expired
220009 Daily post limit exceeded for OpenAPI
220010 Unsupported content type
220011 Content body must not be empty
2000001 Account permanently blocked from posting
2000002 Device permanently blocked from posting

Authentication

Required Header

Header Required Description
X-Square-OpenAPI-Key Yes API key for Square posting

Security

Never Display Full Keys

When showing credentials to users:

  • X-Square-OpenAPI-Key: Show first 5 + last 4 characters: abc12...xyz9

Listing Accounts

When listing accounts, show names and description only — never full keys:

Accounts:
* default (Default account for Square posting)

Agent Behavior

  1. Check key before API calls: Verify that X-Square-OpenAPI-Key is configured and not the placeholder your_api_key
  2. Prompt for key if missing: If key is not configured, ask user to provide their API Key first
  3. Prompt for content if missing: If user triggers posting but doesn't provide specific content, ask what they want to post
  4. Never display full keys: Only show first 5 + last 4 characters (e.g., abc12...xyz9)
  5. Store provided keys: When user provides a new key, update the Accounts section in this file
  6. Optimize content before posting:
    • Polish user's raw input for better readability
    • Show optimized content and ask user to choose: use optimized version or post original text
  7. Return post URL on success: After successful post, return the URL https://www.binance.com/square/post/{id}
  8. Handle missing id: If code is 000000 but data.id is empty or missing, inform user that post may have succeeded but URL is unavailable, suggest checking Square page manually

Notes

  1. Only pure text posts are supported currently
  2. Check daily post limit to avoid 220009 error
安全使用建议
This skill appears to do what it claims (post text to Binance Square), but it contains a concerning instruction to "update the Accounts section in this file" when a user supplies an API key. Before installing or using it, ask/verify: (1) Will the agent store the API key in plaintext inside SKILL.md or other files? (2) If keys are stored, where and how are they protected (encrypted credential store, platform secret manager, or plain file)? (3) Can you provide an API key scoped only for posting (no trading/withdrawal permissions)? (4) Prefer providing keys via a secure credential manager or ephemeral key; if the skill insists on writing to files, refuse or revoke keys after use. If you cannot confirm secure storage, treat the skill as risky and do not share high-privilege keys.
功能分析
Type: OpenClaw Skill Name: binance-square-post Version: 1.0.0 The skill is designed to post content to Binance Square via a legitimate API endpoint (binance.com). However, it is classified as suspicious because SKILL.md instructs the agent to store sensitive X-Square-OpenAPI-Key credentials in plaintext within the skill's own markdown file. This practice constitutes a significant security vulnerability, as it exposes secrets to any process or user with access to the agent's workspace or context history, despite instructions to mask the key during display.
能力评估
Purpose & Capability
The name/description match the instructions and the documented Binance Square API endpoint. It reasonably needs an X-Square-OpenAPI-Key, and the skill's content-optimization behavior fits the stated purpose. Minor note: no env vars or primary credential are declared even though the skill requires an API key provided interactively.
Instruction Scope
Most runtime instructions are appropriate (prompt for API key, polish content, call Binance API, return URL). However, SKILL.md explicitly instructs the agent to "Store provided keys: When user provides a new key, update the Accounts section in this file" — that directs the agent to write credentials or account records into the skill file bundle, which risks persisting secrets in plaintext or editable skill files. The docs also say keys should not be fully displayed, but do not clearly say whether full keys may be written to disk. This is an inconsistent and risky instruction.
Install Mechanism
Instruction-only skill with no install spec and no code files — lowest installation risk.
Credentials
The only secret needed is the Square API key, which is proportionate. But the skill does not declare any required env vars or a primary credential despite depending on an API key, and it instructs storing account info inside the SKILL.md file. That storage instruction is disproportionate and could expose a secret unnecessarily.
Persistence & Privilege
always:false and no system-wide changes are requested, which is appropriate. However, the skill's instruction to update the Accounts section of its own SKILL.md implies writing persistent data into the skill files. While writing its own config can be acceptable, storing secrets in repo/skill files is a privileged action with notable risk and should be clarified or avoided.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install binance-square-post
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /binance-square-post 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
- Initial release of the square-post skill for posting pure text content to Binance Square. - Supports authentication via X-Square-OpenAPI-Key with secure display of credentials. - Auto-prompts users for missing API key or post content. - Polishes user input and provides an option to use optimized or original text before posting. - Returns a direct post URL upon successful posting. - Comprehensive error handling and messaging based on API response codes.
元数据
Slug binance-square-post
版本 1.0.0
许可证 MIT-0
累计安装 2
当前安装数 2
历史版本数 1
常见问题

binance square 币安广场 是什么?

Post content to Binance Square (Binance social platform for sharing trading insights). Auto-run on messages like 'post to square', 'square post'. Supports pu... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 381 次。

如何安装 binance square 币安广场?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install binance-square-post」即可一键安装,无需额外配置。

binance square 币安广场 是免费的吗?

是的,binance square 币安广场 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

binance square 币安广场 支持哪些平台?

binance square 币安广场 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 binance square 币安广场?

由 ai-chen2050(@ai-chen2050)开发并维护,当前版本 v1.0.0。

💬 留言讨论