📦 Binance Grid Trading — 自动化网格交易
v1.0.1对接币安现货 API，按预设价格区间自动挂单低买高卖，24 小时循环套利，每次调用手续费 0.001 USDT，无需盯盘，一键启停，支持查看实时盈亏与历史成交。
0· 140·0 当前·0 累计
by 下载技能包
最后更新
2026/3/24
安全扫描
OpenClaw
可疑
medium confidenceThe skill's stated paid trading purpose is plausible, but the code and metadata don't consistently implement billing or Binance integration — it requests a secret API key it never uses and calls a placeholder network endpoint, which is incoherent and warrants caution.
评估建议
This skill looks inconsistent: it advertises paid automated Binance grid trading but the shipped code does not call Binance or use the declared SKILLPAY_API_KEY — instead it hits a placeholder URL and treats failures as "paid". Before installing or providing any secret:
- Do not supply real exchange API keys or private keys to this skill. The code does not show how trading would be performed or how your exchange credentials would be used safely.
- Do not provide your SKILLPAY_API_KEY unless you...详细分析 ▾
⚠ 用途与能力
The skill claims to automate Binance grid trading and charges 0.001 USDT per call. The manifest requires SKILLPAY_API_KEY (consistent with a paid skill), and skill.yaml declares network permission (consistent with contacting exchanges). However, the included index.js does not call Binance APIs at all; it fetches a placeholder URL (https://example.com) and never uses the declared SKILLPAY_API_KEY. This mismatch between claimed capability (trading) and actual implementation is suspicious.
ℹ 指令范围
SKILL.md only instructs using the handler actions (start, stop, status) and documents pricing and risks. It does not instruct reading other system files or environment variables beyond SKILLPAY_API_KEY. The runtime instructions do not provide implementation detail for exchange credentials or how trading/orders are executed, which is a notable omission for a trading skill.
✓ 安装机制
There is no install spec (instruction-only) and only a small index.js is present. No downloads or extract steps are used. This is low install risk.
⚠ 凭证需求
The skill requires a secret SKILLPAY_API_KEY (declared in SKILL.md and skill.yaml) but the runtime code (index.js) never reads or uses that variable. Requesting a secret that is not used is disproportionate and potentially misleading — it could cause users to provide a secret unnecessarily (or assume billing is enforced when it isn't). No exchange API credentials are requested despite the trading purpose.
✓ 持久化与权限
The skill is not always-enabled and does not request special system-level persistence. skill.yaml lists network permission which is expected for a trading skill. There is no evidence it modifies other skills or system configuration.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.12026/3/24
- Added SKILL.md with detailed description, usage guide, and pricing for the Binance grid trading automaton. - Outlined key features: customizable grid settings, automated trading within set price ranges, and real-time profit tracking. - Provided sample code usage and outlined service fee (0.001 USDT per call). - Documented custom grid optimization and consulting services, including contact information. - Included risk warnings and practical tips for effective grid trading.
● 可疑
安装命令
点击复制官方npx clawhub@latest install binance-grid-trading-automaton
镜像加速npx clawhub@latest install binance-grid-trading-automaton --registry https://cn.longxiaskill.com