← 返回 Skills 市场
362
总下载
0
收藏
6
当前安装
1
版本数
在 OpenClaw 中安装
/install spot
功能描述
Binance Spot request using the Binance API. Authentication requires API key and secret key. Supports testnet and mainnet.
安全使用建议
This skill appears to be a straightforward Binance Spot API instruction set, but its manifest is incomplete. Before installing or using it: (1) don't provide your mainnet API key/secret until the author fixes the manifest to explicitly declare required credentials and binaries; (2) prefer creating a testnet key or a restricted mainnet key (trading-only, withdrawals disabled, IP whitelist) and test there first; (3) ask the publisher to add required env vars (e.g., BINANCE_API_KEY, BINANCE_SECRET) and to document how/where keys are stored or transmitted; (4) confirm that the agent will not log or transmit keys to third-party endpoints and that keys are not persisted by the skill; (5) if you must proceed, rotate keys after testing. If the author cannot clarify why the manifest omits credentials/binaries, treat the skill as untrusted for real funds.
功能分析
Type: OpenClaw Skill
Name: spot
Version: 0.1.0
The skill bundle provides a legitimate interface for the Binance Spot API, including comprehensive documentation for authenticated endpoints. It contains explicit safety instructions for the AI agent in SKILL.md, such as masking API keys in output and requiring explicit user confirmation ('CONFIRM') before executing mainnet transactions. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found; the logic is consistent with its stated purpose of facilitating cryptocurrency trading.
能力评估
Purpose & Capability
The SKILL.md clearly describes authenticated Binance Spot requests that require an API key and secret. However the registry metadata declares no required environment variables, no primary credential, and no required binaries. A Binance trading skill would reasonably declare at least the API key and secret (or a primaryEnv) and note dependencies such as curl/openssl or a HTTP client. This mismatch is incoherent.
Instruction Scope
The instructions are focused on Binance endpoints and include examples for signing requests and sending them (curl + openssl examples). They do not instruct reading unrelated local files or exfiltrating data to other endpoints. That said, because the skill is instruction-only, the agent will need to collect API credentials at runtime (not declared in the manifest), which may lead to ad-hoc handling of secrets unless constrained.
Install Mechanism
Instruction-only skill with no install spec and no code files — low installation risk. Nothing is downloaded or written to disk by the skill itself.
Credentials
Authenticated endpoints require an API key and secret; the SKILL.md and references explicitly describe using them, yet the manifest lists no required env vars or primary credential. Additionally, examples rely on curl and openssl but those binaries are not declared. The absence of declared credentials and binaries is disproportionate to the skill's needs and reduces transparency about where secrets are supplied or stored.
Persistence & Privilege
The skill does not request always:true and is not installing persistent components. It is user-invocable and can be invoked autonomously (platform default), which is expected. No evidence it modifies other skills or system-wide settings.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install spot - 安装完成后，直接呼叫该 Skill 的名称或使用
/spot触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.0
Initial release of the Binance Spot skill.
- Provides authenticated access to Binance Spot API endpoints.
- Supports both testnet and mainnet environments with API key/secret authentication.
- Returns API results in JSON format.
- Includes a comprehensive quick reference table of supported endpoints and required parameters.
元数据
常见问题
Spot 是什么？
Binance Spot request using the Binance API. Authentication requires API key and secret key. Supports testnet and mainnet. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 362 次。
如何安装 Spot？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install spot」即可一键安装，无需额外配置。
Spot 是免费的吗？
是的，Spot 完全免费（开源免费），可自由下载、安装和使用。
Spot 支持哪些平台？
Spot 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Spot？
由 Awessh（@awessh）开发并维护，当前版本 v0.1.0。
推荐 Skills