XT Exchange

XT.COM exchange CLI — spot & futures trading via progressive conversation. Market data, balance, orders, transfer, and withdrawal.

This skill appears to be what it says: it runs the included Python CLI scripts and calls XT.COM API endpoints. Before installing, consider: 1) Only provide an API key with the minimum permissions needed (e.g., read-only for market data; separate trading key without withdrawal permission if possible). 2) Prefer environment variables over storing keys in ~/.xt-exchange/credentials.json; avoid echoing keys into chat or logs. 3) Review the included scripts yourself (they are bundled) and verify network hosts are sapi.xt.com / fapi.xt.com. 4) Be aware the skill will run Python and may run `pip3 install requests` — run in an isolated environment if you are cautious. 5) Test with a low-permission or small-balance account first. 6) The skill relies on conversational confirmations before executing trades/withdrawals — these are procedural (agent-enforced), not cryptographic safeguards; treat API keys as sensitive and assume actions could occur if the agent or environment is compromised.

Type: OpenClaw Skill Name: xt-exchange Version: 1.0.0 The OpenClaw AgentSkills bundle provides legitimate CLI tools for interacting with the XT.COM cryptocurrency exchange's spot and futures APIs. The `SKILL.md` documentation includes robust safety instructions for the AI agent, explicitly requiring user confirmation before executing sensitive operations such as placing orders, transfers, or withdrawals. The Python scripts (`xt_spot.py`, `xt_futures.py`) handle API keys by prioritizing environment variables (`XT_ACCESS_KEY`, `XT_SECRET_KEY`) and falling back to a documented local file (`~/.xt-exchange/credentials.json`). All network communications are directed to legitimate XT.COM API endpoints (`https://sapi.xt.com`, `https://fapi.xt.com`). There is no evidence of intentional malicious behavior, unauthorized data exfiltration, persistence mechanisms, or obfuscation. The design choices, including explicit safety prompts for the agent, align with a benign and responsible implementation of a financial trading skill.