首页龙虾技能列表 › Binance Pro 1.0.0 — Binance工具

🟡 Binance Pro 1.0.0 — Binance工具

v1.0.0

[AI辅助] Complete Binance integration - world's largest crypto exchange. Trade spot, futures with up to 125x leverage, staking, and portfolio management. Use to check...

0· 237·1 当前·1 累计
by @0xspeter·MIT-0
下载技能包
License
MIT-0
最后更新
2026/4/12
安全扫描
VirusTotal
可疑
查看报告
OpenClaw
可疑
medium confidence
The skill's instructions clearly perform Binance trading and require API keys and openssl, but the package metadata does not declare those credentials or binaries, and the skill is forced always-on — these mismatches and missing provenance make it suspicious.
评估建议
This skill's content shows it will perform real Binance trades and requires your API key and secret, but the package metadata does not declare those credentials or the openssl binary it uses — that's an internal inconsistency. Additional red flags: no source/homepage, owner ID mismatch in provided _meta.json, and always:true (the skill will be force-loaded). Before installing: 1) Do not enable this with real funds. Create Binance API keys with the minimum permissions (ideally testnet or read-onl...
详细分析 ▾
用途与能力
The SKILL.md implements a full Binance trading integration (spot, futures, order placement, leverage changes) which legitimately requires API credentials and cryptographic signing. The registry metadata, however, declares no required env vars/credentials and no config paths, and there is no homepage or source URL. The implemented capability (trade execution) therefore requires secrets that are not reflected in the declared requirements — an incoherence.
指令范围
The runtime instructions tell the agent to read/store credentials (~/.openclaw/credentials/binance.json) or environment variables and to build HMAC signatures using openssl and date; they send curl requests to Binance endpoints to place/cancel orders. The SKILL.md uses variable names inconsistently (examples reference API_KEY/SECRET but suggested env names are BINANCE_API_KEY/BINANCE_SECRET), and the instructions assume openssl is available even though it is not declared. The instructions enable sensitive actions (autonomous trading) and rely on secrets and local file writes that are not declared in metadata.
安装机制
This is an instruction-only skill with no install spec or downloaded code, which is the lowest install risk. Nothing is written to disk by an installer step beyond what the instructions ask the user/agent to do at runtime.
凭证需求
The skill requires Binance API key and secret in practice, but requires.env and primary credential fields are empty in metadata. Required binaries list omits openssl (used for HMAC signing) and the SKILL.md recommends storing secrets in an unencrypted JSON file in the user's home directory without guidance on permissions. This mismatch and the lack of declared primary credential are disproportionate and reduce transparency about what sensitive data the skill needs.
持久化与权限
always: true is set for this skill, meaning it will be force-included in every agent run. Combined with the ability to place/cancel orders and change leverage via API calls, that creates a high-impact persistence/privilege profile. The skill also allows autonomous invocation (disable-model-invocation is false by default), which further increases blast radius if the skill or agent is compromised.
安全有层次,运行前请审查代码。

License

MIT-0

可自由使用、修改和再分发,无需署名。

运行时依赖

无特殊依赖

版本

latestv1.0.02026/3/15

Initial release providing full Binance exchange integration: - Supports trading spot and futures (up to 125x leverage), staking, and portfolio management. - Check balances, open/close positions, set stop loss and take profit, and view PnL. - Includes commands for querying prices, trade history, leverage management, and open orders. - Safety guidelines and usage examples provided for all major Binance operations. - Setup via credentials file or environment variables.

● 可疑

安装命令 点击复制

官方npx clawhub@latest install binance-pro-1-0-0
镜像加速npx clawhub@latest install binance-pro-1-0-0 --registry https://cn.clawhub-mirror.com

技能文档

Professional skill for trading on Binance - the world's largest crypto exchange.

🚀 Quick 开始

Setup Credentials

Save to ~/.openclaw/credentials/binance.json:

{
  "apiKey": "YOUR_API_KEY",
  "secretKey": "YOUR_SECRET_KEY"
}

Environment Variables (alternative)

export BINANCE_API_KEY="your_api_key"
export BINANCE_SECRET="your_secret_key"

📊 Basic Queries

Check Spot Balance

TIMESTAMP=$(date +%s%3N)
QUERY="timestamp=${TIMESTAMP}"
SIGNATURE=$(echo -n "$QUERY" | openssl dgst -sha256 -hmac "$SECRET" | cut -d' ' -f2)

curl -s "https://api.binance.com/api/v3/account?${QUERY}&signature=${SIGNATURE}" \ -H "X-MBX-APIKEY: ${API_KEY}" | jq '[.balances[] | select(.free != "0.00000000")]'

获取 Current Price

curl -s "https://api.binance.com/api/v3/ticker/price?symbol=BTCUSDT" | jq '.'

获取 所有 Futures Positions

TIMESTAMP=$(date +%s%3N)
QUERY="timestamp=${TIMESTAMP}"
SIGNATURE=$(echo -n "$QUERY" | openssl dgst -sha256 -hmac "$SECRET" | cut -d' ' -f2)

curl -s "https://fapi.binance.com/fapi/v2/positionRisk?${QUERY}&signature=${SIGNATURE}" \ -H "X-MBX-APIKEY: ${API_KEY}" | jq '[.[] | select(.positionAmt != "0")]'

⚡ Futures (Leverage Trading)

打开 LONG Position (Buy)

SYMBOL="BTCUSDT"
SIDE="BUY"
QUANTITY="0.001"

TIMESTAMP=$(date +%s%3N) QUERY="symbol=${SYMBOL}&side=${SIDE}&type=MARKET&quantity=${QUANTITY}×tamp=${TIMESTAMP}" SIGNATURE=$(echo -n "$QUERY" | openssl dgst -sha256 -hmac "$SECRET" | cut -d' ' -f2)

curl -s -X POST "https://fapi.binance.com/fapi/v1/order?${QUERY}&signature=${SIGNATURE}" \ -H "X-MBX-APIKEY: ${API_KEY}" | jq '.'

打开 SHORT Position (Sell)

SYMBOL="BTCUSDT"
SIDE="SELL"
QUANTITY="0.001"

TIMESTAMP=$(date +%s%3N) QUERY="symbol=${SYMBOL}&side=${SIDE}&type=MARKET&quantity=${QUANTITY}×tamp=${TIMESTAMP}" SIGNATURE=$(echo -n "$QUERY" | openssl dgst -sha256 -hmac "$SECRET" | cut -d' ' -f2)

curl -s -X POST "https://fapi.binance.com/fapi/v1/order?${QUERY}&signature=${SIGNATURE}" \ -H "X-MBX-APIKEY: ${API_KEY}" | jq '.'

设置 停止 Loss

SYMBOL="BTCUSDT"
SIDE="SELL"  # To close LONG use SELL, to close SHORT use BUY
STOP_PRICE="75000"

TIMESTAMP=$(date +%s%3N) QUERY="symbol=${SYMBOL}&side=${SIDE}&type=STOP_MARKET&stopPrice=${STOP_PRICE}&closePosition=true×tamp=${TIMESTAMP}" SIGNATURE=$(echo -n "$QUERY" | openssl dgst -sha256 -hmac "$SECRET" | cut -d' ' -f2)

curl -s -X POST "https://fapi.binance.com/fapi/v1/order?${QUERY}&signature=${SIGNATURE}" \ -H "X-MBX-APIKEY: ${API_KEY}" | jq '.'

设置 Take Profit

SYMBOL="BTCUSDT"
SIDE="SELL"  # To close LONG use SELL, to close SHORT use BUY
TP_PRICE="85000"

TIMESTAMP=$(date +%s%3N) QUERY="symbol=${SYMBOL}&side=${SIDE}&type=TAKE_PROFIT_MARKET&stopPrice=${TP_PRICE}&closePosition=true×tamp=${TIMESTAMP}" SIGNATURE=$(echo -n "$QUERY" | openssl dgst -sha256 -hmac "$SECRET" | cut -d' ' -f2)

curl -s -X POST "https://fapi.binance.com/fapi/v1/order?${QUERY}&signature=${SIGNATURE}" \ -H "X-MBX-APIKEY: ${API_KEY}" | jq '.'

关闭 Position (Market)

# First, get current position quantity
POSITION=$(curl -s "https://fapi.binance.com/fapi/v2/positionRisk?timestamp=${TIMESTAMP}&signature=${SIGNATURE}" \
  -H "X-MBX-APIKEY: ${API_KEY}" | jq -r '.[] | select(.symbol=="BTCUSDT") | .positionAmt')

# If POSITION > 0, it's LONG, close with SELL # If POSITION < 0, it's SHORT, close with BUY

更改 Leverage

SYMBOL="BTCUSDT"
LEVERAGE="10"  # 1 to 125

TIMESTAMP=$(date +%s%3N) QUERY="symbol=${SYMBOL}&leverage=${LEVERAGE}×tamp=${TIMESTAMP}" SIGNATURE=$(echo -n "$QUERY" | openssl dgst -sha256 -hmac "$SECRET" | cut -d' ' -f2)

curl -s -X POST "https://fapi.binance.com/fapi/v1/leverage?${QUERY}&signature=${SIGNATURE}" \ -H "X-MBX-APIKEY: ${API_KEY}" | jq '.'

📈 Spot Trading

Buy (Market)

SYMBOL="ETHUSDT"
QUANTITY="0.1"

TIMESTAMP=$(date +%s%3N) QUERY="symbol=${SYMBOL}&side=BUY&type=MARKET&quantity=${QUANTITY}×tamp=${TIMESTAMP}" SIGNATURE=$(echo -n "$QUERY" | openssl dgst -sha256 -hmac "$SECRET" | cut -d' ' -f2)

curl -s -X POST "https://api.binance.com/api/v3/order?${QUERY}&signature=${SIGNATURE}" \ -H "X-MBX-APIKEY: ${API_KEY}" | jq '.'

Sell (Market)

SYMBOL="ETHUSDT"
QUANTITY="0.1"

TIMESTAMP=$(date +%s%3N) QUERY="symbol=${SYMBOL}&side=SELL&type=MARKET&quantity=${QUANTITY}×tamp=${TIMESTAMP}" SIGNATURE=$(echo -n "$QUERY" | openssl dgst -sha256 -hmac "$SECRET" | cut -d' ' -f2)

curl -s -X POST "https://api.binance.com/api/v3/order?${QUERY}&signature=${SIGNATURE}" \ -H "X-MBX-APIKEY: ${API_KEY}" | jq '.'

🔧 Utilities

视图 打开 Orders

TIMESTAMP=$(date +%s%3N)
QUERY="timestamp=${TIMESTAMP}"
SIGNATURE=$(echo -n "$QUERY" | openssl dgst -sha256 -hmac "$SECRET" | cut -d' ' -f2)

# Futures curl -s "https://fapi.binance.com/fapi/v1/openOrders?${QUERY}&signature=${SIGNATURE}" \ -H "X-MBX-APIKEY: ${API_KEY}" | jq '.'

取消 Order

SYMBOL="BTCUSDT"
ORDER_ID="123456789"

TIMESTAMP=$(date +%s%3N) QUERY="symbol=${SYMBOL}&orderId=${ORDER_ID}×tamp=${TIMESTAMP}" SIGNATURE=$(echo -n "$QUERY" | openssl dgst -sha256 -hmac "$SECRET" | cut -d' ' -f2)

curl -s -X DELETE "https://fapi.binance.com/fapi/v1/order?${QUERY}&signature=${SIGNATURE}" \ -H "X-MBX-APIKEY: ${API_KEY}" | jq '.'

视图 Trade History

SYMBOL="BTCUSDT"
TIMESTAMP=$(date +%s%3N)
QUERY="symbol=${SYMBOL}×tamp=${TIMESTAMP}"
SIGNATURE=$(echo -n "$QUERY" | openssl dgst -sha256 -hmac "$SECRET" | cut -d' ' -f2)

curl -s "https://fapi.binance.com/fapi/v1/userTrades?${QUERY}&signature=${SIGNATURE}" \ -H "X-MBX-APIKEY: ${API_KEY}" | jq '.[-10:]'

🏦 Detailed Futures Balance

TIMESTAMP=$(date +%s%3N)
QUERY="timestamp=${TIMESTAMP}"
SIGNATURE=$(echo -n "$QUERY" | openssl dgst -sha256 -hmac "$SECRET" | cut -d' ' -f2)

curl -s "https://fapi.binance.com/fapi/v2/balance?${QUERY}&signature=${SIGNATURE}" \ -H "X-MBX-APIKEY: ${API_KEY}" | jq '[.[] | select(.balance != "0")]'

📋 Popular Pairs

PairDescription
BTCUSDTBitcoin
ETHUSDTEthereum
BNBUSDTBNB
SOLUSDTSolana
XRPUSDTXRP
DOGEUSDTDogecoin
ADAUSDTCardano
AVAXUSDTAvalanche

⚠️ Safety Rules

  • ALWAYS 验证 position 之前 closing
  • ALWAYS 设置 停止 Loss 在...上 leveraged trades
  • NEVER 使用 leverage higher 比 10x 没有 experience
  • 验证 pair 和 quantity 之前 executing
  • CONFIRM 带有 用户 之前 executing large orders

🔗 Links


Skill created 由 总计 Easy Software - Clayton Martins

数据来源:ClawHub ↗ · 中文优化:龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制

免费技能或插件可能存在安全风险,如需更匹配、更安全的方案,建议联系付费定制

了解定制服务