← 返回 Skills 市场

Bitfinex Lending Monitor

Name: Bitfinex Lending Monitor
Author: reed1898

作者 Reed · GitHub ↗ · v0.1.0

cross-platform ⚠ suspicious

274

总下载

当前安装

版本数

在 OpenClaw 中安装

/install bitfinex-lending-monitor

功能描述

Monitor Bitfinex lending (funding) performance via API. Use when the user asks to check Bitfinex funding收益/借贷利息, automate daily收益统计, or avoid opening the Bit...

使用说明 (SKILL.md)

Bitfinex Lending Monitor

Use this skill to fetch and summarize Bitfinex funding收益 from API.

What to collect

Funding wallet balances from v2/auth/r/wallets
Active funding credits from v2/auth/r/funding/credits/{Symbol}
Ledger entries from v2/auth/r/ledgers/{Currency}/hist filtered by wallet=funding

Run

Export API credentials:

export BITFINEX_API_KEY="your_api_key"
export BITFINEX_API_SECRET="your_api_secret"

Run summary:

python3 skills/bitfinex-lending-monitor/scripts/check_lending.py --currency USD --days 7

Optional JSON output:

python3 skills/bitfinex-lending-monitor/scripts/check_lending.py --currency USD --days 7 --json

Notes

Prefer read-only API permissions for safety.
Timestamps are milliseconds since epoch.
If no --currency is passed, script defaults to USD and symbol fUSD.

安全使用建议

This skill appears to be a straightforward Bitfinex lending/funding reader, but the registry metadata is inconsistent with the runtime requirements. Before installing or giving it to an agent: - Do not provide full-access API keys. Create a dedicated Bitfinex API key limited to read-only wallet/funding/ledger permissions. - Confirm the skill registry metadata is updated to declare BITFINEX_API_KEY and BITFINEX_API_SECRET (and set primaryEnv appropriately) so automated permission prompts are accurate. - Review the included scripts yourself (they are small) to confirm there are no unexpected network endpoints; the script calls only api.bitfinex.com and signs requests with HMAC-SHA384. - Note the slight path mismatch in the README/run instructions; run the script from the correct location or update SKILL.md. - If you plan to allow autonomous invocation, consider the blast radius: a compromised read-only key can reveal balances and transaction history. Keep keys isolated and rotate them if used for automation.

功能分析

Type: OpenClaw Skill Name: bitfinex-lending-monitor Version: 0.1.0 The bitfinex-lending-monitor skill is a legitimate tool designed to fetch and summarize lending performance from the Bitfinex API. The core script (scripts/check_lending.py) uses standard Python libraries to perform authenticated requests to api.bitfinex.com and includes clear instructions for users to provide API credentials via environment variables. The documentation (SKILL.md and references/api-notes.md) explicitly recommends using read-only API permissions, and there is no evidence of data exfiltration, obfuscation, or unauthorized execution.

能力评估

⚠ Purpose & Capability

The name/description and the included script both perform read-only Bitfinex lending/funding queries — that is coherent. However the registry metadata declares no required environment variables or primary credential while both SKILL.md and the script require BITFINEX_API_KEY and BITFINEX_API_SECRET. The absence of declared secrets in metadata is a meaningful mismatch.

ℹ Instruction Scope

SKILL.md explicitly instructs exporting BITFINEX_API_KEY and BITFINEX_API_SECRET and running the provided script. The instructions and script access only Bitfinex v2 authenticated endpoints (wallets, funding credits, ledgers) and do not read other system files or send data to unrelated endpoints. Minor issue: the SKILL.md run path (skills/bitfinex-lending-monitor/scripts/...) does not match the manifest path (scripts/check_lending.py), which could confuse usage.

✓ Install Mechanism

This is an instruction-only skill with an included Python script and no install spec. There are no downloads or external install steps, so nothing is written/installed by an automated installer.

⚠ Credentials

The script legitimately requires two sensitive environment variables (BITFINEX_API_KEY and BITFINEX_API_SECRET) to call authenticated endpoints — that is proportionate. However the registry metadata failing to declare these required secrets (and failing to identify a primary credential) is a significant omission that affects user consent and risk assessment.

✓ Persistence & Privilege

The skill is not always-enabled and does not request persistent system-wide privileges. It does not attempt to modify other skills or system config. Autonomous invocation is allowed by default, but there are no additional privileges requested here.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install bitfinex-lending-monitor
安装完成后，直接呼叫该 Skill 的名称或使用 /bitfinex-lending-monitor 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v0.1.0

Initial release: Bitfinex funding summary (USDt alias, credits/wallet/ledger support).

元数据

Slug bitfinex-lending-monitor

版本 0.1.0

许可证 —

累计安装 0

当前安装数 0

历史版本数 1

常见问题