← 返回 Skills 市场
97
总下载
0
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install temp-skills
功能描述
Integrates OKX API for spot and contract trading, asset management, risk control, and real-time market data with automated risk checks and logging.
安全使用建议
Do not install or enable this skill unless you fully trust its source and intent. Specific actions to consider before proceeding:
- Treat the plaintext API key in SKILL.md as a red flag: ask the publisher why a key is embedded and whose account it is. Do not assume it's safe.
- Prefer skills that require you to supply your own API credentials via declared env vars or config; avoid skills that ship with built-in trading keys.
- If you must test, do so in a sandbox/testnet environment and ensure the skill uses read-only or test credentials.
- Ask where logs and notifications go (who is 'Steve'?). Require explicit endpoints and consent for notifications.
- Disable autonomous invocation or require manual confirmation for any trade actions until you verify behavior.
- If the exposed API key belongs to you, rotate it immediately and remove it from the skill description.
Given the clear mismatch between metadata and SKILL.md and the ability to execute trades, treat this skill as suspicious unless the author provides a clear, verifiable justification and safer credential handling.
功能分析
Type: OpenClaw Skill
Name: temp-skills
Version: 1.0.0
The skill bundle contains hardcoded sensitive credentials, including an OKX API Key and UID, within the SKILL.md file. While the instructions describe legitimate trading bot functionality, the inclusion of plaintext secrets is a significant security vulnerability that could lead to unauthorized account access or financial loss, and it deviates from safe configuration practices.
能力评估
Purpose & Capability
The skill description says it integrates OKX (requires API access), but the registry metadata declares no required env vars/credentials. The SKILL.md itself contains a plaintext OKX API key, UID, and proxy — credentials that should have been declared or supplied by the user. This is an incoherent declaration: a trading skill needs credentials, but the metadata does not request any.
Instruction Scope
Runtime instructions tell the agent to initialize the OKX API, query balances, and place orders, and include an explicit API key, UID, and local proxy. Instructions also require logging and to 'notify Steve' on exceptions, but do not say where logs or notifications go. The instructions therefore ask the agent to use credentials and perform network-enabled trading actions and external notifications without specifying endpoints or provenance.
Install Mechanism
No install spec and no code files (instruction-only). That minimizes disk writes and supply-chain risk, but it also means all runtime behavior depends on the agent executing the prose (network calls) — there is no bundled code to inspect.
Credentials
The skill embeds a full API key with trading permissions directly in SKILL.md rather than declaring it as a required credential or asking the user to provide their own. This gives the skill direct authority to execute trades against someone else's account (or to use an account supplied by the skill author) and is disproportionate to what should be shared in a marketplace listing.
Persistence & Privilege
always:false (normal). Autonomous invocation is allowed by default; combined with the embedded trading credential this creates a significant blast radius because the agent could autonomously place real trades using the included API key without explicit per-action user approval.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install temp-skills - 安装完成后，直接呼叫该 Skill 的名称或使用
/temp-skills触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
- 初始版本，集成 OKX API，用于现货与合约交易管理。
- 支持主流币种买卖、永续与交割合约交易。
- 实现资产查询、资金划转、风控监控（止损止盈、仓位控制）、实时行情及深度数据获取。
- 安全限制包括20%最大回撤、日志记录、异常通知机制。
元数据
常见问题
Temp Skills 是什么？
Integrates OKX API for spot and contract trading, asset management, risk control, and real-time market data with automated risk checks and logging. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 97 次。
如何安装 Temp Skills？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install temp-skills」即可一键安装，无需额外配置。
Temp Skills 是免费的吗？
是的，Temp Skills 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Temp Skills 支持哪些平台？
Temp Skills 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Temp Skills？
由 steve xia（@danihe001）开发并维护，当前版本 v1.0.0。
推荐 Skills