ClawHub

Gate Spot Exchange Skill

v1.0.3

Gate spot trading and account operations skill. Use when the user asks to buy/sell crypto on spot, check account value, or place conditional/trigger orders....

⭐ 0· 116·0 current·0 all-time
byGate@gate-exchange
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
CryptoRequires walletCan make purchases
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description is a Gate spot trading skill and the only required secrets are GATE_API_KEY and GATE_API_SECRET. Declared MCP read/write tools, permissions (Spot:Write, Wallet:Read), and required env vars directly match the stated trading/account capabilities.
✓
Instruction Scope
SKILL.md contains detailed intent-routing, explicit tool mappings, and mandatory safety gates (order drafts + explicit immediate-turn confirmation before any write). It explicitly forbids asking users to paste secrets into chat and restricts calls to only the documented MCP tools. Instructions do not reference unrelated files, extra env vars, or unexplained external endpoints.
✓
Install Mechanism
No install spec and no code files — instruction-only skill. Nothing will be downloaded or written by an installer in the skill bundle itself.
✓
Credentials
Requests only the two Gate credentials required to operate a Gate spot API session (GATE_API_KEY, GATE_API_SECRET) and sets GATE_API_KEY as primary. No other secrets, host config paths, or unrelated service tokens are requested.
✓
Persistence & Privilege
Skill is not always-included and is user-invocable. It does not request elevated platform privileges or modification of other skills' configs. Autonomous invocation is permitted (platform default) but not combined with any additional privileges here.
Assessment
This skill appears coherent for Gate spot trading. Before installing, ensure you: (1) only provide Gate API credentials with the minimal permissions you accept (Spot:Write, Wallet:Read); (2) trust the local MCP deployment that the agent will use (the skill assumes a configured local Gate MCP session); (3) rely on the built-in confirmation gates — verify the assistant shows an order draft and you explicitly confirm before any real trades; and (4) treat this skill like any tool that can place financial orders — mistakes or misconfirmations can result in real trades and losses. If you want stronger safety, limit the API key's permissions or use a restricted test account/key for first-time use.

Like a lobster shell, security has layers — review code before you run it.

latestvk970xke98sxp42vkf4wx665qjh84das3

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

EnvGATE_API_KEY, GATE_API_SECRET
Primary envGATE_API_KEY

Comments