Weex

WEEX Futures exchange integration. Trade USDT-M perpetual futures with up to 125x leverage on WEEX.

This skill implements a WEEX futures trading client and legitimately needs your WEEX API key, secret, and passphrase. Before installing or using it: - Verify the source: the skill has no homepage and the owner is unknown. Prefer code from an authoritative repo or the exchange's official SDK. - Correct the metadata mismatch: the manifest/registry should declare required env vars and binaries; ask the publisher to fix that or treat the package as untrusted until fixed. - Use a restricted API key: create an API key with only the minimum permissions (enable trading and read, disable withdrawals), and consider IP whitelisting if WEEX supports it. - Limit funds and test: try on a small test account or with minimal funds first to validate behavior. - Review 'uploadAiLog' usage: the skill documents an endpoint that uploads AI trading logs to WEEX — consider whether you want trade-decision telemetry sent to the exchange. - Run in a sandbox: if you’ll let an agent execute commands autonomously, run the skill in an isolated environment and audit its network calls. If the publisher cannot provide a trustworthy upstream repository or fix the declared metadata, treat this skill with caution.

Type: OpenClaw Skill Name: weex-trading-skills Version: 1.1.0 The OpenClaw skill bundle for WEEX Futures trading appears benign. It uses standard tools (`curl`, `jq`, `python3`, `openssl`) to interact with the WEEX API, handling API keys via environment variables. Crucially, both `SKILL.md` and `README.md` include explicit 'Safety Rules' and 'Safety Notes' that instruct the AI agent to always display order details, verify actions, check balances, and obtain user confirmation before executing trades, directly mitigating prompt injection risks and unauthorized actions. There is no evidence of data exfiltration, malicious execution, persistence, or obfuscation.