← 返回 Skills 市场
627
总下载
0
收藏
1
当前安装
2
版本数
在 OpenClaw 中安装
/install okx-trading-exe
功能描述
A standardized adapter gateway skill exclusively for OKX exchange to execute trading actions (buy/sell) and query capabilities across OKX Live and Demo envir...
安全使用建议
This skill's code appears to be what it claims (an OKX trading adapter) and will need your OKX API key, secret, and passphrase to place orders. Before installing or running: (1) Do not paste live API credentials into a project folder unless you understand the risk — prefer platform-managed secrets or environment variables outside the project tree. (2) Verify the API key permissions (restrict to trading/read as required; avoid withdrawal permission). (3) Because the registry metadata does not declare the required secrets, treat this as a packaging/declared-permissions mismatch — ask the maintainer to update metadata. (4) Review and test against the demo provider first (okx_demo) with keys that have no live-fund risk. (5) If you want the agent to prompt a human for keys, update the runtime flow (execute.py currently exits on missing creds). If you cannot inspect or trust the maintainer, avoid supplying live credentials.
功能分析
Type: OpenClaw Skill
Name: okx-trading-exe
Version: 0.1.1
The skill's Python code appears to be a legitimate OKX trading client, handling API keys and making requests to `https://www.okx.com` as expected. However, the `SKILL.md` file contains explicit prompt injection instructions for the AI agent. It directs the agent to detect missing API keys, interrupt its current task, ask the human user for sensitive `API_KEY`, `API_SECRET`, and `PASSPHRASE`, and then instruct the human to write these credentials into the `.env` file. While the intent is to enable the skill's functionality, this demonstrates a significant vulnerability where the agent is instructed to handle sensitive data and modify the file system based on markdown instructions, which could be exploited by a malicious prompt in a different context.
能力评估
Purpose & Capability
The skill's stated purpose (OKX trading executor) matches the code: providers/okx_provider.py implements API calls and order placement to OKX. However the registry metadata claims 'Required env vars: none' and 'Primary credential: none' while the code and SKILL.md clearly require OKX API_KEY, API_SECRET, and PASSPHRASE. That mismatch is unexpected and should be fixed or explained.
Instruction Scope
SKILL.md instructs the agent to prompt the human to write credentials into a .env file if missing. The code attempts to load .env from the skill directory (or parent) and will exit with an error if the three OKX credentials are not present. There is no instruction or code that reads unrelated files, exfiltrates data, or posts data to endpoints other than the OKX API. Minor inconsistency: SKILL.md implies agent-driven interactive prompting, but execute.py simply prints an error and exits when creds are missing.
Install Mechanism
No install spec or third-party downloads are present; this is an instruction+code bundle that runs using existing Python and requests. Nothing is fetched from external arbitrary URLs and no archives are extracted.
Credentials
The code legitimately requires three exchange secrets (OKX_API_KEY, OKX_API_SECRET, OKX_PASSPHRASE). That is proportionate to the skill's purpose. The concern is that the skill registry metadata does not declare these required env vars or a primary credential, which is misleading and could cause automated policy checks or secret-handling mechanisms to miss them.
Persistence & Privilege
The skill does not request 'always' presence, does not modify other skills, and contains no install-time persistence. It reads a local .env file only and uses the OKX API; it does not create background services or alter system-wide settings.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install okx-trading-exe - 安装完成后，直接呼叫该 Skill 的名称或使用
/okx-trading-exe触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.1
- Introduced core provider structure with base_provider.py and okx_provider.py to standardize API integration.
- Laid the groundwork for clean separation of logic for multiple exchange environments (OKX Live/Demo).
- No changes to existing usage, but new files enable future provider expansion and cleaner code organization.
v0.1.0
0.1-just for myself
元数据
常见问题
OKX交易执行器 是什么？
A standardized adapter gateway skill exclusively for OKX exchange to execute trading actions (buy/sell) and query capabilities across OKX Live and Demo envir... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 627 次。
如何安装 OKX交易执行器？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install okx-trading-exe」即可一键安装，无需额外配置。
OKX交易执行器 是免费的吗？
是的，OKX交易执行器 完全免费（开源免费），可自由下载、安装和使用。
OKX交易执行器 支持哪些平台？
OKX交易执行器 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 OKX交易执行器？
由 iceonme（@iceonme）开发并维护，当前版本 v0.1.1。
推荐 Skills