← 返回 Skills 市场
Xxyy Trade
作者
Jimmy-Holiday
· GitHub ↗
· v1.3.0
· MIT-0
493
总下载
0
收藏
0
当前安装
7
版本数
在 OpenClaw 中安装
/install xxyy-trade-skill
功能描述
This skill should be used when the user asks to "buy token", "sell token", "swap token", "trade crypto", "check trade status", "query transaction", "scan tok...
安全使用建议
This skill appears to be what it says (an XXYY API wrapper) but exercise caution: the XXYY API key grants the ability to execute real trades and there is no read-only key. Before installing, verify the publisher and homepage (https://www.xxyy.io), confirm which SKILL.md / metadata will be used (there are two conflicting SKILL.md files), and decide whether you want an agent to be able to invoke the skill autonomously. Use a dedicated API key with minimal funds, enable IP whitelisting on the XXYY side, avoid storing the key in version control, and test with tiny transactions first. If you need clarity, ask the publisher which SKILL.md is authoritative and whether autonomous invocation is intended.
功能分析
Type: OpenClaw Skill
Name: xxyy-trade-skill
Version: 1.3.0
The xxyy-trade skill is a comprehensive tool for on-chain trading and token analysis on Solana, Ethereum, BSC, and Base via the XXYY Open API (xxyy.io). It includes well-defined procedures for wallet management, token swaps, and automated scanning strategies (AI and Twitter-based). The skill incorporates strong security practices, such as mandatory user confirmation before executing trades, explicit warnings regarding API key sensitivity, and strict parameter validation. No evidence of malicious intent, data exfiltration, or unauthorized execution was found in SKILL.md or _meta.json.
能力评估
Purpose & Capability
Name/description align with required artifacts: the skill calls the XXYY Open API and declares curl and XXYY_API_KEY. Requesting a single XXYY_API_KEY and curl is coherent for an API-wrapping trading skill.
Instruction Scope
SKILL.md instructions are narrowly scoped to the documented XXYY endpoints and describe buy/sell/query/feed/ping operations. The instructions warn the API key can execute real trades and recommend IP whitelisting. The skill does not instruct reading unrelated files or other environment variables.
Install Mechanism
No install spec and no code files — instruction-only. This is low risk because nothing is downloaded or written to disk by the skill itself.
Credentials
Only XXYY_API_KEY is required which is appropriate for the API, but the documentation explicitly states there is no read‑only key: the same key can execute real on‑chain trades. That makes the single required credential highly privileged — loss of the key = loss of funds. This is expected for a custodial trading integration but is high risk and should be treated accordingly.
Persistence & Privilege
Registry metadata and the included SKILL.md conflict: the registry summary shows model-invocation defaults (disabled-model-invocation: false by default) while the embedded skills/xxyy-trade/SKILL.md sets disabled-model-invocation: true and lists allowed-tools (Bash, Read, AskUserQuestion). The duplicate SKILL.md files and mismatch of invocation settings are incoherent and could affect whether the agent can call the skill autonomously.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install xxyy-trade-skill - 安装完成后，直接呼叫该 Skill 的名称或使用
/xxyy-trade-skill触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.3.0
xxyy-trade-skill v1.3.0
- Added support for new API query types: KOL Buy List, Tag Holder Buy List, Label List (SOL only), Signal List (AI trending, SOL/BSC), Trending List (hot tokens, SOL/BSC), and Launch Token (token creation on SOL/BSC).
- Extended skill triggers to include "launch token", "create token", "发币", and "创建代币".
- Updated documentation to list all newly supported endpoints and usage details.
- Removed the legacy README.md; SKILL.md now provides complete usage and reference.
v1.2.3
- Added support and documentation for the "get IP" endpoint to check outbound IP (useful for API key whitelisting).
- Updated description keywords to include "check IP", "get IP", "IP whitelist", "查IP", "IP白名单".
- Added a security recommendation for configuring API key IP whitelists and instructions for using the `get_ip` tool.
- Expanded the endpoint list to include `GET /api/trade/open/api/ip` (Get IP, exempt from whitelist).
- No breaking changes to existing trading or data query functionality.
v1.2.2
**Summary:** Expanded supported trigger phrases and updated documentation with a strict, complete endpoint list and new API endpoints.
- Added new trigger phrases (AI scan, auto/smart/tweet scan, onboarding, get started, and Chinese equivalents) to the skill description.
- Explicitly documented a full, strict list of supported API endpoints for clarity and safe usage.
- Added documentation for new endpoints: Trade History, Token Query, Wallet Info, List Wallets, and PNL Query.
- Emphasized that only listed endpoints are available; unsupported operations should be clearly communicated.
v1.2.1
xxyy-trade-skill v1.2.1
- Expanded supported user intents to include wallet-related queries ("list wallets", "show wallets", "my wallets") in the SKILL.md description.
- Version bump to 1.2.1.
- Documentation updates only; no API or behavior changes.
v0.1.2
xxyy-trade-skill v0.1.2
- Clarified and highlighted key security information in documentation, including visual warnings about API key sensitivity.
- Made environment variable setup and API key instructions more concise.
- Minor formatting improvements to metadata and documentation for easier reading.
- No functional or API changes. This version is documentation-only.
v0.1.1
xxyy-trade-skill v0.1.1 changelog
- Added detailed security notes to the documentation, clarifying the custodial trading model and the sensitivity of API Keys.
- Updated SKILL.md to emphasize that trading is custodial (trades are executed by XXYY on behalf of the user; no private keys needed).
- Added warnings about API Key permissions and security best practices.
- Specified that only XXYY_API_KEY is strictly required in the environment variables.
v0.1.0
xxyy-trade-skill 1.1.0 changes:
- Added detailed documentation for buying, selling, and swapping tokens across Solana, Ethereum, BSC, and Base using the XXYY Open API.
- Included authentication and environment setup instructions, emphasizing the need for a valid XXYY API key.
- Documented trade query, token scan (feed), status checks, and API ping endpoints with usage examples and comprehensive parameter descriptions.
- Listed advanced filter options for token scanning, covering market data and social metrics.
- Specified DEX and quote token values supported on Solana and BSC chains.
元数据
常见问题
Xxyy Trade 是什么？
This skill should be used when the user asks to "buy token", "sell token", "swap token", "trade crypto", "check trade status", "query transaction", "scan tok... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 493 次。
如何安装 Xxyy Trade？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install xxyy-trade-skill」即可一键安装，无需额外配置。
Xxyy Trade 是免费的吗？
是的，Xxyy Trade 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Xxyy Trade 支持哪些平台？
Xxyy Trade 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Xxyy Trade？
由 Jimmy-Holiday（@jimmy-holiday）开发并维护，当前版本 v1.3.0。
推荐 Skills