Binance Trading Assistant

Monitor Binance spot and futures balances, open positions with P&L, portfolio performance, and set price alerts via your AI assistant.

Security Scan

The skill's code matches its Binance-monitoring purpose and does not obviously exfiltrate secrets, but there are incoherences around credential declaration and installation that warrant caution before use.

Purpose & Capability

The code and SKILL.md implement exactly the advertised functionality (checking spot/futures balances and positions via ccxt). However the skill registry metadata declares no required credentials or primary credential despite the SKILL.md and scripts requiring Binance API keys stored in ~/.openclaw/secrets/binance.json. That metadata omission is an inconsistency that could mislead users about what the skill needs.

Instruction Scope

Runtime instructions are narrowly scoped: they read credentials from the user's home, use ccxt to call Binance, and print JSON results. The SKILL.md statement 'Keys stored locally, never transmitted' is misleading—keys must be sent to Binance when the library queries the API. SKILL.md and README also disagree (README suggests exporting env vars), which increases chance of user error.

Install Mechanism

There is no install spec (instruction-only install), but package.json lists the ccxt dependency (a public npm package). No downloads from unknown URLs are present. The lack of an install spec means the environment must provide Node and dependencies; this is an operational mismatch but not a direct malware signal.

Credentials

The skill reasonably requires only two secrets (apiKey and secret) to do its job, but the registry metadata does not declare them. The code reads a secrets file under ~/.openclaw/secrets/binance.json (uses only HOME env var otherwise). The mismatch between declared requirements and actual required secrets is concerning because users may not realize they must supply sensitive API keys.

Persistence & Privilege

The skill is not set to always:true, does not modify other skills or system configs, and only reads a file under the user's home. It does not persist new credentials or make itself permanent beyond normal installation.

What to consider before installing

This skill appears to do what it claims (uses ccxt to query Binance) and the code does not visibly exfiltrate your keys, but be cautious: 1) The registry metadata fails to declare the required Binance API keys—you must supply them in ~/.openclaw/secrets/binance.json (or via env vars as README suggests). 2) Use Binance API keys with the minimum permissions (read-only) and restrict them by IP where possible. 3) Verify file permissions on the secrets file (keep it readable only by your account). 4) Install and review the dependency (ccxt) yourself before running (npm install) and run the scripts in a controlled environment if you’re unsure. 5) Because the skill source/homepage is unknown and the author is generic, consider requesting the source or more provenance, or run it first with throwaway/low-privilege keys to confirm behavior. If any of these mismatches (metadata vs instructions) concern you, treat the skill as untrusted until provenance is verified.

Binance Trading Assistant Skill

Monitor Binance account balances, positions, and get price alerts through your AI assistant.

Capabilities

This skill enables your AI assistant to:

• Query Binance spot and futures balances
• Monitor open positions with real-time P&L
• Track portfolio performance
• Set price alerts for cryptocurrencies

Commands

The assistant can handle requests like:

• "Check my Binance balance"
• "Show my open positions"
• "What's my total P&L today?"
• "How much BTC do I have?"

Setup

1. Create Binance API keys (read-only recommended)
2. Store credentials in ~/.openclaw/secrets/binance.json:

{
  "apiKey": "your_api_key",
  "secret": "your_api_secret"
}

Tools

check_binance_balance

Query account balances across spot and futures.

Usage: "Check my Binance balance"

check_positions

List all open futures positions with P&L.

Usage: "Show my open positions"

get_portfolio_summary

Get a complete portfolio overview.

Usage: "What's my portfolio worth?"

Safety

• Use read-only API keys
• Keys stored locally, never transmitted
• No trading permissions required

Pricing

$5/month subscription via ClawHub

Author

AI Trading Tools