📦 Agent Trading Bot — AI量化交易
v1.0.0为 OpenClaw 打造的 AI 量化交易框架，一键接入 Binance、Hyperliquid、Bluefin 等加密交易所及 Polymarket、Kalshi 预测市场，自动化执行策略、风控与资产配置。
0· 109·0 当前·0 累计
by 下载技能包
最后更新
2026/4/5
安全扫描
OpenClaw
可疑
medium confidenceThe skill appears to implement a real trading framework, but its metadata and runtime instructions are inconsistent (it needs exchange API keys and writes files to your home directory yet declares no required env vars or config paths), so review carefully before using with real funds or production keys.
评估建议
This package largely behaves like a trading bot, but it has important metadata mismatches you should not ignore: the registry declares no required env vars while the SKILL.md and code clearly expect exchange API keys and write config/log files under ~/.openclaw. Before using with real funds: 1) Review the full script (including the truncated parts) to confirm there are no hidden endpoints or surprising behavior. 2) Use API keys with the minimum permissions required (disable withdrawals, restrict...详细分析 ▾
⚠ 用途与能力
The skill's name/description match the code and SKILL.md: it is a trading bot that talks to exchanges and provides strategies and risk controls. However, the registry metadata declares no required environment variables or config paths while SKILL.md and the code explicitly require exchange API keys (e.g., BINANCE_API_KEY/BINANCE_API_SECRET) and read/write risk/config and log files under ~/.openclaw. That mismatch is incoherent and should have been declared.
ℹ 指令范围
SKILL.md and the script keep scope to trading-related actions: fetching prices/klines, computing indicators, paper/live trade execution, backtests, and managing a kill-switch. The instructions and code read/write files in ~/.openclaw (trading-config.json, workspace/memory logs and paper portfolio) and make network calls to exchange APIs — all expected for a trading bot. No evidence in the visible files of unrelated data collection or external exfiltration, but the skill logs decisions and persists trade/log data locally which users should be aware of.
✓ 安装机制
There is no install specification (instruction-only with included script files). No downloads or archive extraction are requested, so nothing extra is written to disk beyond the script's normal runtime behavior (it will create ~/.openclaw paths).
⚠ 凭证需求
The code and SKILL.md require exchange API credentials (BINANCE_API_KEY/BINANCE_API_SECRET and mentions Hyperliquid keys) but the registry lists no required env vars or primary credential — an inconsistency. The requested secrets themselves are proportional for a trading bot, but registry metadata omission is misleading. Also the skill will need API keys with trading permissions to perform live trades; users should limit key scopes (disable withdrawals) and prefer testnet keys for testing.
ℹ 持久化与权限
The skill does not request 'always' or other broad platform privileges. It will persist configuration, logs, and a paper-portfolio under the user's home (~/.openclaw), which is reasonable for a bot but means state and logs are stored locally. The skill does not appear to modify other skills or global agent settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/5
Initial release — AI-powered trading bot framework for crypto exchanges and prediction markets
● 无害
安装命令
点击复制官方npx clawhub@latest install agent-trading-bot
镜像加速npx clawhub@latest install agent-trading-bot --registry https://cn.longxiaskill.com