← 返回 Skills 市场
549
总下载
0
收藏
5
当前安装
9
版本数
在 OpenClaw 中安装
/install okx-cex-bot
功能描述
Manage Grid bots (spot/contract/coin-margined) and DCA Martingale bots (Spot DCA 现货马丁 / Contract DCA 合约马丁) on OKX. Covers create, stop, amend, monitor P&L, T...
安全使用建议
This skill's instructions expect you to have (or to install) the OKX CLI and to use API keys or OAuth stored in your local OKX config, but the registry metadata does not advertise those requirements — that's the primary red flag. Before installing or using it: (1) verify the npm package @okx_ai/okx-trade-cli is the official OKX publisher and inspect its npm page and source; (2) prefer using OAuth or a restricted API key (least privilege, trading-only if possible) and never paste keys into chat; (3) inspect ~/.okx/config.toml to see what secrets are stored and where; (4) consider running the CLI and the skill in an isolated environment (container or VM) if you must install globally; (5) ask the publisher/source for a registry/install manifest to reconcile the missing install/credential declarations — the inconsistency should be resolved before trusting the skill.
功能分析
Type: OpenClaw Skill
Name: okx-cex-bot
Version: 1.3.2
The okx-cex-bot skill bundle is a legitimate tool for managing OKX trading bots (Grid and DCA). The SKILL.md file provides comprehensive instructions for an AI agent, including explicit security guardrails such as forbidding the acceptance of credentials in chat and preventing automatic fund transfers. It utilizes a scoped npm package (@okx_ai/okx-trade-cli) and includes detailed logic for verifying authentication states and trading modes (Live vs. Demo) before execution. No indicators of data exfiltration, malicious persistence, or prompt injection attacks were found.
能力标签
能力评估
Purpose & Capability
The skill's purpose (manage OKX Grid/DCA bots) legitimately requires an OKX CLI and API credentials (or OAuth). The registry metadata, however, lists no required binaries, no install spec, and no primary credential, while the SKILL.md frontmatter and body both reference the 'okx' binary and require API credentials. The mismatch between declared registry requirements and the runtime instructions is inconsistent.
Instruction Scope
The instructions direct the agent (or user) to install and run the okx CLI, run commands that reveal and depend on ~/.okx/config.toml and the CLI's auth state, and to perform browser OAuth flows. Reading the local OKX config and using CLI auth state is coherent with the skill's function but those file reads and secrets are not declared in the registry. The guide also references other internal docs (../_shared/preflight.md) and other skills to load, which may affect runtime behavior.
Install Mechanism
There is no install spec in the registry, but the SKILL.md includes frontmatter and instructions to install @okx_ai/okx-trade-cli via npm (-g). This is an active install instruction (global npm install) from a namespaced package — not inherently malicious but the install expectation is undocumented in the registry and should be made explicit. Users should verify the package source and publisher before installing.
Credentials
The skill states 'Requires API credentials' and the runtime commands access local CLI config (~/.okx/config.toml) and OAuth state, yet the registry declares no required env vars or primary credential. That omission is disproportionate: managing bots requires credentials and access to auth config; the registry should declare this explicitly. The instructions correctly warn not to paste credentials in chat, but the skill will rely on locally stored secrets.
Persistence & Privilege
The skill is not marked always:true and is instruction-only with no code files or automatic install in the registry. It does not request elevated persistent privileges in the registry. Runtime behavior will depend on local CLI state but the skill itself does not declare any system-wide persistence.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install okx-cex-bot - 安装完成后，直接呼叫该 Skill 的名称或使用
/okx-cex-bot触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.3.2
okx-cex-bot 1.3.2 changelog:
- Adds support for CLI OAuth authentication (browser login flow); updates credential check logic to select between API key and OAuth modes.
- Documents new OAuth-based operation flow and mode selection for live/demo environments.
- Introduces `okx bot grid amend` command for updating running grid bots’ parameters.
- Updates required npm install instructions to specify `@okx_ai/[email protected]`.
- Enhances guidance on handling 401/authentication errors via the `okx-cex-auth` skill.
- Simplifies credential preflight and clarifies usage patterns for both API key and OAuth users.
v1.3.1
Version 1.3.1
- Metadata version updated to 1.3.1.
- No changes to commands, logic, or documentation content.
- No file changes detected in this release.
v1.3.0
okx-cex-bot v1.3.0
- Bumped skill version to 1.3.0 in metadata.
- No other user-facing changes documented in this release.
v1.2.8
- Version bump from 1.1.0 to 1.2.8 in metadata.
- Added "Preflight" section: instructs use of a shared preflight checklist and using the skill version from metadata.
- No changes to functionality or CLI commands.
- Documentation updated for consistency and centralized setup instructions.
v1.2.7
okx-cex-bot 1.2.7
- No code or file changes in this release.
- Skill description and documentation streamlined for conciseness and clarity.
- Explicit mention of supported bot types: spot/contract/coin-margined grid, and DCA Martingale (spot/contract).
- Added more details regarding bot P&L, TP/SL support, AI parameter suggestions, and margin/investment adjustment capabilities.
- Improved and clarified security instructions and flow for credential/profile selection.
- No changes to CLI behavior or supported commands.
v1.2.6
okx-cex-bot 1.2.6
- Updated security guidance: the skill now strictly prohibits providing API credentials in chat and instructs users to configure them only via the CLI or by editing config files locally.
- Clarified credential setup instructions, emphasizing safe practices and environment variable options.
- Streamlined and simplified profile switching and credential setup documentation.
- No changes to code or command interface.
v1.2.1
okx-cex-bot 1.2.1
- Updated skill metadata field from `moltbot` to `agent`.
- No changes to functionality, code, or CLI usage.
- No file or behavioral modifications detected.
v1.2.0
- Clarified that DCA bots are contract-only (no longer covering spot DCA; only leveraged Martingale on futures/swaps).
- Updated description and command examples to reflect contract-only restriction for DCA bots.
- Minor updates for accuracy in examples (e.g., DCA creation uses contract instruments and leverage).
- All instructions and routes for grid bots remain unchanged.
v1.1.9
- Expanded and clarified README/skill documentation in SKILL.md with detailed setup, profile management (live vs demo), credential checks, and error handling.
- More explicit rules and user guidance for selecting between live (real funds) and demo (simulated) trading profiles.
- Added step-by-step credential setup methods and troubleshooting for authentication failures.
- Improved guidance on when to use this skill versus related OKX skills for other functions.
- No code changes or functional updates; documentation and usage instructions only.
元数据
常见问题
okx-cex-bot 是什么？
Manage Grid bots (spot/contract/coin-margined) and DCA Martingale bots (Spot DCA 现货马丁 / Contract DCA 合约马丁) on OKX. Covers create, stop, amend, monitor P&L, T... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 549 次。
如何安装 okx-cex-bot？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install okx-cex-bot」即可一键安装，无需额外配置。
okx-cex-bot 是免费的吗？
是的，okx-cex-bot 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
okx-cex-bot 支持哪些平台？
okx-cex-bot 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 okx-cex-bot？
由 numpy0001（@numpy0001）开发并维护，当前版本 v1.3.2。
推荐 Skills