EVM BNB Band Trader

Automate BNB Chain swing trades with wallet-key execution, buying at trigger price and managing 5% take-profit and 3% stop-loss levels.

Security Scan

The skill is a straightforward BNB-chain swing trading bot whose required inputs (private key, RPC URL, token and sizing parameters) match its stated purpose, but it includes placeholders and incomplete safety checks so treat it as a prototype and do not run with real funds without code changes and careful safeguards.

Purpose & Capability

Name/description align with requested inputs and behavior: the script requires an EVM private key, BNB RPC URL, token and price/size parameters which are expected for a wallet-key trading bot.

Instruction Scope

SKILL.md and the script instruct setting sensitive env vars and running the Python script; that's within scope. However SKILL.md claims safety controls (e.g., 'Refuse run if gas or balance insufficient') that are not implemented in the provided code. The code only validates key format and required envs and uses mock quote/swap placeholders rather than real quote or signing/broadcast logic.

Install Mechanism

No install spec and no external downloads; the skill is an instruction + local Python script. No third-party packages or network installs are performed by the skill itself.

Credentials

Requested environment variables (EVM_PRIVATE_KEY, BNB_RPC_URL, TOKEN_OUT, pricing/size/timeout params) are proportionate to a trading bot. That said, providing a private key via environment is sensitive; the skill does not request unrelated credentials.

Persistence & Privilege

always is false and there are no install-time hooks or system-wide configuration changes. The skill does not request persistent elevated privileges.

Assessment

This is a prototype trading bot that matches its description, but it contains placeholders and lacks several promised safety checks. Before trusting it with real funds: (1) inspect and test the code locally and run only in dry-run mode first; (2) do not place a main wallet private key on a shared machine or CI — prefer a dedicated, low-value/test wallet or external signing (hardware wallet or remote signer); (3) implement real price-quoting, router/aggregator swap logic, transaction signing, and explicit gas/balance checks (the script currently uses mock_get_price/mock_swap); (4) use a trusted BNB RPC endpoint and consider rate/latency implications; (5) run in an isolated environment and limit network exposure; (6) consider additional logging/auditing and automated kill-switches. If you need this to run autonomously, understand the risk of giving an agent code that can access a private key — enable only after adding hardened signing and balance checks.

Implement BNB Chain swing trading with strict risk controls.

1) Configure secrets and params

Set environment variables before running:

• EVM_PRIVATE_KEY (wallet private key, never hardcode)
• BNB_RPC_URL (BSC RPC endpoint)
• TOKEN_IN (default WBNB)
• TOKEN_OUT (target token)
• BUY_TRIGGER_PRICE (trigger buy threshold)
• BUY_SIZE_BNB (position size in BNB)
• TAKE_PROFIT_PCT (default 0.05)
• STOP_LOSS_PCT (default 0.03)
• POLL_SECONDS (default 10)

2) Run bot

Use script:

python scripts/bnb_band_bot.py --mode run

Dry run first:

python scripts/bnb_band_bot.py --mode dry-run

3) Strategy rules (fixed)

• Entry: execute buy when latest price >= BUY_TRIGGER_PRICE
• Exit TP: sell when price >= entry_price * 1.05
• Exit SL: sell when price <= entry_price * 0.97
• One-position mode: no pyramiding

4) Safety controls

• Refuse run if env vars missing
• Refuse run if private key format invalid
• Refuse run if gas or balance insufficient
• Log every decision with timestamp

5) Notes

• Script uses DEX quote+swap placeholder flow; wire production router/aggregator before real funds.
• Always run dry-run first and validate slippage/gas assumptions.