功能描述

Professional KuCoin (KC) trading system - multi-account support, spot/margin/futures trading, asset transfers. Use to check balances, transfer assets, open/c...

使用说明 (SKILL.md)

KuCoin Trader 🟢

Name: KuCoin Trader
Author: govor2026

Professional automated trading system for KuCoin (KC) - a global cryptocurrency exchange.

🚀 Quick Start

Setup Credentials

Save to ~/.openclaw/credentials/kucoin.json:

{
  "apiKey": "YOUR_API_KEY",
  "secretKey": "YOUR_SECRET_KEY",
  "passphrase": "YOUR_PASSPHRASE"
}

Environment Variables (alternative)

export KUCOIN_API_KEY="your_api_key"
export KUCOIN_SECRET_KEY="your_secret_key"
export KUCOIN_PASSPHRASE="your_passphrase"

📊 Basic Queries

Command	Description
`node scripts/accounts.js`	List all account balances
`node scripts/market.js --symbol BTC-USDT`	Get current price
`node scripts/query.js`	Query all active orders

💰 Asset Transfer

Supported types: main, trade, margin, isolated, futures

# Main to Trade
node scripts/transfer.js --from main --to trade --currency USDT --amount 100

# Trade to Futures
node scripts/transfer.js --from trade --to futures --currency USDT --amount 100

# Any account transfer
node scripts/transfer.js --from \x3CFROM> --to \x3CTO> --currency \x3CCURRENCY> --amount \x3CAMOUNT>

⚡ Spot Trading

# Market Buy
node scripts/spot.js trade --symbol BTC-USDT --side buy --type market --size 0.001

# Limit Buy
node scripts/spot.js trade --symbol ETH-USDT --side buy --type limit --price 2500 --size 0.1

# Market Sell
node scripts/spot.js trade --symbol BTC-USDT --side sell --type market --size 0.001

# Limit Sell
node scripts/spot.js trade --symbol ETH-USDT --side sell --type limit --price 3000 --size 0.1

# Query orders
node scripts/spot.js orders --symbol BTC-USDT

# Cancel order
node scripts/spot.js cancel --orderId xxx

🏦 Margin Trading (Cross Margin & Isolated Margin)

# --- Cross Margin (全仓杠杆) ---
# Check borrowable
node scripts/margin.js borrowable --currency USDT

# Borrow
node scripts/margin.js borrow --currency USDT --amount 100

# Repay
node scripts/margin.js repay --currency USDT --amount 50

# Trade with leverage (5x)
node scripts/margin.js trade --symbol BTC-USDT --side buy --size 0.01 --leverage 5

# Query orders
node scripts/margin.js orders --symbol BTC-USDT
node scripts/margin.js all-orders

# --- Isolated Margin (逐仓杠杆) ---
# Check isolated account info
node scripts/margin.js info-isolated --symbol BTC-USDT

# Check borrowable
node scripts/margin.js borrowable-isolated --symbol BTC-USDT

# Borrow/Repay
node scripts/margin.js borrow-isolated --symbol BTC-USDT --amount 0.01
node scripts/margin.js repay-isolated --symbol BTC-USDT --amount 0.01

# Trade with leverage (3x)
node scripts/margin.js trade-isolated --symbol BTC-USDT --side buy --size 0.01 --leverage 3

# Enable/Disable isolated margin
node scripts/margin.js enable
node scripts/margin.js disable

# Query isolated orders
node scripts/margin.js orders-isolated --symbol BTC-USDT

📈 Futures Trading

# Long
node scripts/futures.js trade --symbol BTC-USDT --side buy --size 0.001 --leverage 10

# Short
node scripts/futures.js trade --symbol BTC-USDT --side sell --size 0.001 --leverage 10

# Set leverage
node scripts/futures.js leverage --symbol BTC-USDT --leverage 20

📈 Supported Trading Pairs

Pair	Description
BTC-USDT	Bitcoin
ETH-USDT	Ethereum
SOL-USDT	Solana
XRP-USDT	XRP
DOGE-USDT	Dogecoin
ADA-USDT	Cardano
AVAX-USDT	Avalanche
KCS-USDT	KuCoin Token

🏦 Account Types

Type	Description
`main`	Funding Account - primary asset storage
`trade`	Spot Trading Account - for trading
`margin`	Cross Margin Account - leveraged trading (up to 5x)
`isolated`	Isolated Margin Account
`futures`	Futures Account - perpetual contracts

⚠️ Safety Rules

ALWAYS verify position before closing
ALWAYS set Stop Loss on leveraged trades
NEVER use leverage higher than 10x without experience
VERIFY pair and quantity before executing
CONFIRM with user before executing large orders

🔗 Links

Skill for KuCoin trading with multi-account support

安全使用建议

What to consider before installing: - This package contains runnable trading code (node scripts + a KuCoin client) and requires your KuCoin API key, secret, and passphrase (via env vars or ~/.openclaw/credentials/kucoin.json). The registry metadata does NOT declare these credentials — that's an inconsistency you should consider a red flag. - The skill is configured always:true (always loaded). With API credentials available, an autonomous agent could run the scripts and place orders, move funds, borrow/repay, etc. Remove always:true or disable autonomous use unless you fully trust the author and the environment. - Before using: review the code locally (it's included) to confirm there are no surprises and to fix obvious bugs (some scripts show truncation/syntax issues). Verify network endpoints — the code calls api.kucoin.com and api-futures.kucoin.com (expected for KuCoin). - Least privilege: create API keys with minimal necessary permissions and limited funding (or use a subaccount) for testing. If possible use KuCoin sandbox credentials first. - Do NOT store high-privilege keys in plaintext on shared systems. Prefer platform secret stores where supported; if you must use the file, keep it in a secure location and with strict filesystem permissions. - If you want to proceed, remove always:true, declare the required env vars/credentials in skill metadata, and run the scripts in a safe, isolated environment (or with sandbox keys) until you are confident they behave as expected. If you want, I can point out the exact files and code locations that read credentials and perform order/transfer operations so you can review them before installing.

功能分析

Type: OpenClaw Skill Name: kucoin-trader Version: 1.0.1 The bundle is a functional trading toolkit for the KuCoin cryptocurrency exchange, providing scripts for spot, margin, and futures trading. It uses standard Node.js built-in modules (https, crypto) to interact with official KuCoin API endpoints (api.kucoin.com) and handles credentials locally via environment variables or a configuration file in the user's home directory. No evidence of data exfiltration, malicious prompt injection, or unauthorized network activity was found across the codebase (lib/kucoin-client.js and associated scripts).

能力评估

⚠ Purpose & Capability

The code and SKILL.md clearly require KuCoin API credentials (env vars or ~/.openclaw/credentials/kucoin.json) and implement trading, transfers, margin and futures operations — all coherent with the stated purpose. However the registry metadata listed no required environment variables/primary credential and the top-level note said "instruction-only" yet the package includes many executable code files. The missing explicit declaration of required credentials and the mismatch about being instruction-only are incoherent and reduce transparency.

⚠ Instruction Scope

The SKILL.md and scripts instruct the agent/user to provide API keys (via env or a file) and to run node scripts that will create orders, transfer funds, borrow/repay, etc. The runtime code reads HOME and ~/.openclaw/credentials/kucoin.json and process.env; there is no instruction to read unrelated system data or exfiltrate it. The problem: SKILL.md says to confirm large orders with the user, but the skill is configured always:true (see persistence_privilege) and the code can place trades directly when invoked — enabling autonomous placement of trades if the agent calls the scripts.

ℹ Install Mechanism

There is no install spec (no external downloads); the skill requires node on PATH and ships full source files. This is lower install risk because nothing is fetched at install time, but bundling executable code without declaring install/permission requirements is a transparency issue. No suspicious external URLs or archives are used.

⚠ Credentials

The functionality legitimately requires API credentials (apiKey, secretKey, passphrase) and optionally an isSandbox flag; the SKILL.md and code expect these via env vars or the config file. However the registry metadata did not declare any required env or primary credential, which is misleading. The code only accesses expected credentials and the user's home path for a single config file; it does not request unrelated secrets. Still, failing to declare required secrets is a material problem.

⚠ Persistence & Privilege

The skill is flagged always:true in metadata. That gives it forced inclusion in every agent run. Combined with the skill's ability to execute trading/transfer/borrow/repay actions when provided API keys, this significantly increases risk (it could be invoked autonomously to place trades). There is no clear justification in the package for always:true; this should be removed or limited.

版本历史

v1.0.1

kucoin-trader 1.0.1 - Removed support for the KUCOIN_IS_SANDBOX environment variable. - Updated "Create Account" link with a referral code. - Removed examples for enabling/disabling isolated margin and for asset transfers within margin section.

v1.0.0

Version 0.9.1 introduces a streamlined script structure and improved documentation. - Added new scripts: `query.js` and `spot.js` for active order management and spot trading. - Removed separate complex scripts for isolated, margin-buy, report, and general trade functions. - Updated README and SKILL.md to reflect the consolidated script commands and examples. - Added a LICENSE file for clear project licensing. - Simplified instructions and script usage for easier trading and account management.

v0.9.0

- Initial public release of kucoin-trader with comprehensive multi-account trading support. - Provides scripts for spot, margin (cross/isolated), and futures trading on KuCoin. - Supports asset transfers between main, trade, margin, isolated, and futures accounts. - Includes commands to check balances, transfer assets, open/close positions, and generate trading reports. - Features safety guidelines to help prevent trading mistakes. - Documentation includes setup instructions, usage examples, and supported trading pairs.

元数据

Slug kucoin-trader

版本 1.0.1

许可证 MIT-0

累计安装 2

当前安装数 2

历史版本数 3

常见问题

KuCoin Trader 是什么？

Professional KuCoin (KC) trading system - multi-account support, spot/margin/futures trading, asset transfers. Use to check balances, transfer assets, open/c... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 421 次。

如何安装 KuCoin Trader？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install kucoin-trader」即可一键安装，无需额外配置。

KuCoin Trader 是免费的吗？

是的，KuCoin Trader 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。

KuCoin Trader 支持哪些平台？

KuCoin Trader 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。

谁开发了 KuCoin Trader？

由 govor（@govor2026）开发并维护，当前版本 v1.0.1。

KuCoin Trader