📦 Exchange Copy Trading — 交易所跟单
v0.1.0指导 OpenClaw 打开浏览器，在支持的交易所完成一键跟单：自动跳转跟单设置页，填写 trader 信息并提交，全程无需人工操作。
0· 77·0 当前·0 累计
by @luyao-inc下载技能包
最后更新
2026/4/2
安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
This skill is coherent with its stated purpose (automating a follow/trade flow in a browser), but it references bitget.fit — verify that is an official/trusted endpoint before using. Because the skill can click to submit real financial orders, only use it if you: 1) confirm the exact URL is legitimate (prefer official domains, e.g., bitget.com), 2) keep your session already logged in and never share credentials or 2FA, 3) require an explicit, visible user confirmation step before the agent perfo...详细分析 ▾
⚠ 用途与能力
The declared purpose (automating a browser to follow a trader on Bitget) aligns with the instructions (navigate, fill amount, click confirm). However the example and reference URLs use the domain bitget.fit rather than the widely-known bitget.com; that domain mismatch is unexpected for a skill that will execute financial transactions and could indicate a third-party/mirroring site or a phishing target.
ℹ 指令范围
SKILL.md explicitly instructs the agent to open a browser, locate the amount field, fill it, and click follow/confirm. It also forbids logging in or collecting passwords and requires user confirmation of amounts and terms. This scope is consistent with the stated purpose, but it permits autonomous completion of monetary transactions if the agent is allowed to act — the skill does instruct to pause for legal-term acceptance and for manual handling of captchas or failures.
✓ 安装机制
Instruction-only skill with no install steps, no downloaded code, and no required binaries — minimal installation footprint.
✓ 凭证需求
The skill requests no environment variables, credentials, or config paths and assumes an already-logged-in browser session. That is proportionate to a browser-automation-only workflow, provided the agent does not attempt to read stored credentials or other unrelated secrets.
ℹ 持久化与权限
always:false (normal). disable-model-invocation is false (agent can be invoked autonomously), which is platform-default; because the skill can perform financial actions, you should ensure explicit confirmation is required before any submit/confirm step rather than allowing silent autonomous runs.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv0.1.02026/4/2
NULL
● 可疑
安装命令
点击复制官方npx clawhub@latest install exchange-copy-trading
镜像加速npx clawhub@latest install exchange-copy-trading --registry https://cn.longxiaskill.com