← 返回 Skills 市场
67
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install pionex-bot
功能描述
Use when the user asks to create, query, list, adjust, reduce, or cancel Pionex bot orders (Futures Grid, Spot Grid, Smart Copy). Includes listing/paginating...
安全使用建议
This skill appears to be written to control Pionex trading bots via a CLI, which legitimately requires exchange API keys and careful provenance. Before installing or using it: 1) Verify the skill's origin — ask for a homepage/repository or an official Pionex package link and confirm the npm package name and publisher on npmjs.com and GitHub. 2) Require explicit declarations: ask the author to list the exact environment variables (e.g., PIONEX_API_KEY, PIONEX_API_SECRET) and the minimum required API scopes (never give withdraw permissions unless absolutely required). 3) Prefer using the skill in dry-run mode and require explicit user confirmation for any write action; never allow the skill to run with autonomous write privileges without manual approval. 4) If you must provide keys for testing, create a restricted API key with only the minimal scopes (trading/bot, no withdrawals). 5) If provenance cannot be established (no official homepage/repo/publisher), treat this as untrusted and avoid using it with real funds. Providing the package's official URL, publisher identity, or a repo would increase confidence and could move this assessment toward benign.
功能分析
Type: OpenClaw Skill
Name: pionex-bot
Version: 1.0.0
The pionex-bot skill provides a legitimate interface for managing Pionex trading bots (Futures Grid, Spot Grid, and Smart Copy) via the pionex-trade-cli. The SKILL.md file includes robust safety rules for the AI agent, such as mandatory confirmation for write operations, use of --dry-run flags, and explicit parameter validation. No evidence of data exfiltration, malicious execution, or prompt injection was found; the skill appears well-aligned with its stated purpose of cryptocurrency bot management.
能力标签
能力评估
Purpose & Capability
SKILL.md clearly intends to manage Pionex bot lifecycle and explicitly says API credentials and bot permissions are required, and references a CLI binary (pionex-trade-cli). The registry metadata, however, declares no required env vars or install spec. The SKILL.md claims author 'pionex' but the registry entry has no homepage and an unknown owner — these provenance and declaration gaps are inconsistent with a sensitive trading skill.
Instruction Scope
The runtime instructions are narrowly focused on running the pionex-trade-cli commands to list, create, adjust, reduce, cancel bots and to push trading signals; they include useful safety rules (confirm write intent, use --dry-run, call check_params). The instructions do not ask to read unrelated system files, but they do assume access to account-level API credentials and the ability to perform trading writes and signal pushes.
Install Mechanism
SKILL.md embeds an agent.requires.install block that references an npm package (@pionex/pionex-ai-kit) providing pionex-trade-cli. The registry metadata shown elsewhere lists no install spec; this mismatch is concerning. Installing an npm package from the public registry is a moderate-risk action (network download and code run) but not inherently malicious — provenance verification is needed.
Credentials
The skill states it requires API credentials and bot permissions (read/write trading scope), but the registry lists no required environment variables or primary credential. A bot-management skill legitimately needs API keys (key + secret, with trading permissions), so the absence of declared credentials and explicit required env var names is a disproportionate omission and a red flag. Also pushing signals may need additional role credentials which are not described.
Persistence & Privilege
The skill does not request always:true and does not declare config path or system-level persistence. Autonomous invocation is allowed (platform default) — given the sensitive write capabilities (trading ops), allowlisting/explicit user confirmation for writes is important but not enforced by registry metadata.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install pionex-bot - 安装完成后，直接呼叫该 Skill 的名称或使用
/pionex-bot触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release
元数据
常见问题
pionex-bot 是什么？
Use when the user asks to create, query, list, adjust, reduce, or cancel Pionex bot orders (Futures Grid, Spot Grid, Smart Copy). Includes listing/paginating... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 67 次。
如何安装 pionex-bot？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install pionex-bot」即可一键安装，无需额外配置。
pionex-bot 是免费的吗？
是的，pionex-bot 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
pionex-bot 支持哪些平台？
pionex-bot 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 pionex-bot？
由 pibrandon（@pibrandon）开发并维护，当前版本 v1.0.0。
推荐 Skills