← 返回 Skills 市场

Binance Trading Assistant

Name: Binance Trading Assistant
Author: dagangtj

作者 dagangtj · GitHub ↗ · v1.0.0 · MIT-0

cross-platform ⚠ suspicious

253

总下载

当前安装

版本数

在 OpenClaw 中安装

/install binance-trading-assistant

功能描述

Monitor Binance spot and futures balances, open positions with P&L, portfolio performance, and set price alerts via your AI assistant.

使用说明 (SKILL.md)

Binance Trading Assistant Skill

Monitor Binance account balances, positions, and get price alerts through your AI assistant.

Capabilities

This skill enables your AI assistant to:

Query Binance spot and futures balances
Monitor open positions with real-time P&L
Track portfolio performance
Set price alerts for cryptocurrencies

Commands

The assistant can handle requests like:

"Check my Binance balance"
"Show my open positions"
"What's my total P&L today?"
"How much BTC do I have?"

Setup

Create Binance API keys (read-only recommended)
Store credentials in ~/.openclaw/secrets/binance.json:

{
  "apiKey": "your_api_key",
  "secret": "your_api_secret"
}

Tools

check_binance_balance

Query account balances across spot and futures.

Usage: "Check my Binance balance"

check_positions

List all open futures positions with P&L.

Usage: "Show my open positions"

get_portfolio_summary

Get a complete portfolio overview.

Usage: "What's my portfolio worth?"

Safety

Use read-only API keys
Keys stored locally, never transmitted
No trading permissions required

Pricing

$5/month subscription via ClawHub

Author

AI Trading Tools

安全使用建议

This skill appears to do what it claims (uses ccxt to query Binance) and the code does not visibly exfiltrate your keys, but be cautious: 1) The registry metadata fails to declare the required Binance API keys—you must supply them in ~/.openclaw/secrets/binance.json (or via env vars as README suggests). 2) Use Binance API keys with the minimum permissions (read-only) and restrict them by IP where possible. 3) Verify file permissions on the secrets file (keep it readable only by your account). 4) Install and review the dependency (ccxt) yourself before running (npm install) and run the scripts in a controlled environment if you’re unsure. 5) Because the skill source/homepage is unknown and the author is generic, consider requesting the source or more provenance, or run it first with throwaway/low-privilege keys to confirm behavior. If any of these mismatches (metadata vs instructions) concern you, treat the skill as untrusted until provenance is verified.

功能分析

Type: OpenClaw Skill Name: binance-trading-assistant Version: 1.0.0 The skill is a legitimate Binance account monitor that uses the well-known 'ccxt' library to fetch balances and positions. It follows the stated purpose in SKILL.md and README.md, reading API credentials from a local configuration file (~/.openclaw/secrets/binance.json) and outputting data locally for the AI agent. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found.

能力评估

⚠ Purpose & Capability

The code and SKILL.md implement exactly the advertised functionality (checking spot/futures balances and positions via ccxt). However the skill registry metadata declares no required credentials or primary credential despite the SKILL.md and scripts requiring Binance API keys stored in ~/.openclaw/secrets/binance.json. That metadata omission is an inconsistency that could mislead users about what the skill needs.

ℹ Instruction Scope

Runtime instructions are narrowly scoped: they read credentials from the user's home, use ccxt to call Binance, and print JSON results. The SKILL.md statement 'Keys stored locally, never transmitted' is misleading—keys must be sent to Binance when the library queries the API. SKILL.md and README also disagree (README suggests exporting env vars), which increases chance of user error.

ℹ Install Mechanism

There is no install spec (instruction-only install), but package.json lists the ccxt dependency (a public npm package). No downloads from unknown URLs are present. The lack of an install spec means the environment must provide Node and dependencies; this is an operational mismatch but not a direct malware signal.

⚠ Credentials

The skill reasonably requires only two secrets (apiKey and secret) to do its job, but the registry metadata does not declare them. The code reads a secrets file under ~/.openclaw/secrets/binance.json (uses only HOME env var otherwise). The mismatch between declared requirements and actual required secrets is concerning because users may not realize they must supply sensitive API keys.

✓ Persistence & Privilege

The skill is not set to always:true, does not modify other skills or system configs, and only reads a file under the user's home. It does not persist new credentials or make itself permanent beyond normal installation.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install binance-trading-assistant
安装完成后，直接呼叫该 Skill 的名称或使用 /binance-trading-assistant 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

Binance Trading Assistant Skill 1.0.0 - Initial release with support for Binance spot and futures accounts - Query balances, monitor real-time open positions and P&L - Track portfolio performance and set price alerts for cryptocurrencies - Simple setup with secure, read-only API key storage - Subscription required: $5/month via ClawHub

元数据

Slug binance-trading-assistant

版本 1.0.0

许可证 MIT-0

累计安装 1

当前安装数 1

历史版本数 1

常见问题