← 返回 Skills 市场
727
总下载
0
收藏
4
当前安装
1
版本数
在 OpenClaw 中安装
/install okx-api
功能描述
This skill should be used when the user asks to "query OKX account balance", "place an order on OKX", "get OKX market data", "check OKX positions", "cancel O...
安全使用建议
This skill is functionally coherent for interacting with OKX, but review these before installing: (1) The registry metadata omits the required OKX_API_KEY / OKX_SECRET_KEY / OKX_PASSPHRASE variables — expect to supply them. (2) The SKILL.md recommends adding those keys to the top-level ~/.openclaw/openclaw.json env field, which causes OpenClaw to inject the keys into every agent session — consider using per-skill or per-agent scoped secrets instead, or limit which agents/skills can access them. (3) Use sandbox/demo keys (OKX_DEMO=1) while testing and restrict API key permissions (no withdrawal, IP whitelist, minimal trading permissions) and rotate keys regularly. (4) Because the skill can place/cancel orders, ensure you (a) require explicit confirmations for any real-trading actions, (b) review the example scripts (they include a prompt for real orders), and (c) audit the code or prefer installing from a trusted repository. If you need higher assurance, ask the publisher to update registry metadata to declare required env vars and to document safer credential storage options.
功能分析
Type: OpenClaw Skill
Name: okx-api
Version: 1.0.0
The skill bundle is a legitimate and well-documented integration for the OKX cryptocurrency exchange API v5. It provides standard authentication helpers in `scripts/okx_auth.py`, clear usage examples for market data and trading, and appropriate safety warnings (e.g., the `OKX_DEMO` check in `examples/place-order.py`). No evidence of data exfiltration, malicious execution, or harmful prompt injection was found; all network activity is directed to official OKX endpoints.
能力评估
Purpose & Capability
The files and SKILL.md implement the stated purpose (OKX REST/WebSocket access, signing, example scripts). However, the registry metadata lists no required environment variables or primary credential even though the code and documentation require OKX_API_KEY, OKX_SECRET_KEY, and OKX_PASSPHRASE. That metadata omission is an inconsistency (likely an oversight) that reduces transparency.
Instruction Scope
Runtime instructions explicitly direct the agent (and the user) to store API credentials in ~/.openclaw/openclaw.json under the top-level env field so OpenClaw will inject them into agent environments. This grants broad exposure of sensitive keys to every agent session and to other skills. Other than that, the SKILL.md stays within scope (describes endpoints, signing, demo header, and uses only OKX endpoints).
Install Mechanism
No install specification or remote downloads are present (instruction-only plus local Python scripts), and all code files are bundled. No external installers, URL downloads, or archive extraction steps were found.
Credentials
The skill legitimately needs OKX_API_KEY, OKX_SECRET_KEY, and OKX_PASSPHRASE for private endpoints and OKX_DEMO for sandbox use; those are used directly by the code. But the registry metadata does not declare these required env vars. More importantly, the recommended placement (top-level env in ~/.openclaw/openclaw.json) causes the credentials to be injected into every agent session, which is broader than strictly necessary and raises risk of unintended credential access by other skills or agent actions.
Persistence & Privilege
The skill is not set to always:true and is user-invocable; it does not request elevated platform privileges or modify other skills. However, because OpenClaw will inject top-level env variables into every agent session (per the SKILL.md guidance), the combination of autonomous skill invocation (default) with broadly scoped credentials increases the blast radius if an agent or another skill is compromised. Consider restricting autonomous actions or credential scope.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install okx-api - 安装完成后，直接呼叫该 Skill 的名称或使用
/okx-api触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
- Initial release of the OKX API v5 skill for interacting with OKX exchange.
- Provides guides for authentication, REST and WebSocket usage, and common account and trading operations.
- Includes configuration setup for API credentials and sandbox mode.
- Offers quick reference tables for endpoints, key parameters, error codes, and rate limits.
- Supplies reusable helper script for authentication and request handling.
元数据
常见问题
OKX API 是什么？
This skill should be used when the user asks to "query OKX account balance", "place an order on OKX", "get OKX market data", "check OKX positions", "cancel O... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 727 次。
如何安装 OKX API？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install okx-api」即可一键安装，无需额外配置。
OKX API 是免费的吗？
是的，OKX API 完全免费（开源免费），可自由下载、安装和使用。
OKX API 支持哪些平台？
OKX API 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 OKX API？
由 風魔小次郎（@xhfkindergarten）开发并维护，当前版本 v1.0.0。
推荐 Skills