Phemex Cli

Trade on Phemex (USDT-M futures, Coin-M futures, Spot) — place orders, manage positions, check balances, stream real-time market data, and query historical d...

This skill appears to be a straightforward wrapper around the phemex-cli tool, but you should take ordinary precautions before installing/using it: 1) Verify the npm package and GitHub repo (publisher, recent commits, issues) to reduce supply-chain risk—npm packages can run install scripts. 2) Prefer using environment variables over storing keys in plaintext files; if you do use ~/.phemexrc, set strict file permissions (chmod 600) and keep the file private. 3) Create API keys with minimal required permissions (e.g., read-only key for market queries; separate key with trading enabled only when you intend to place trades; do not enable withdrawals). 4) If you do not want the agent to place trades autonomously, disable autonomous invocation for this skill in your agent settings or require explicit confirmation for any trading command. 5) Before a global npm install, inspect the package.json and any postinstall scripts in the package source. These steps will reduce the main risks (credential exposure and malicious install-time scripts).

Type: OpenClaw Skill Name: phemex-cli Version: 2.0.0 The phemex-cli skill bundle provides a structured interface for trading on the Phemex exchange. The SKILL.md file includes explicit safety guidelines for the AI agent, such as requiring user confirmation for orders, leverage changes, and cancellations, and strictly forbidding autonomous trading. While the tool handles sensitive API credentials and uses a local configuration file (~/.phemexrc), these behaviors are standard for financial CLI tools and are accompanied by defensive instructions to mitigate accidental or unauthorized actions.