Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Neko Futures Trader

Automated Binance Futures trading scanner with runner detection and price monitor. Features: - Runner detection (volume spike + momentum + breakout) - Real c...

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 27 · 0 current installs · 0 all-time installs
byluke@lukmanc405
MIT-0
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
medium confidence
Purpose & Capability
Name/description, required env vars (BINANCE_API_KEY, BINANCE_SECRET, TELEGRAM_*, BRAVE_API_KEY), and included code all relate to an automated Binance Futures scanner, Telegram alerts, and Brave Search news. Binaries (python3) are appropriate.
Instruction Scope
Runtime instructions and included scripts run continuous/background scanner and price-monitor processes, read a .env file, write state files, and will auto-execute orders via Binance APIs. The SKILL.md startup and position-monitor/price-monitor scripts hardcode paths under /root/.openclaw/workspace and call other scripts (os.system quick_scan) — this is functional for the platform but is broader filesystem/process activity than a simple read-only skill.
Install Mechanism
No install spec in registry (instruction-only), code is included and requires installing Python libraries. The README suggests 'pip install requests hmac hashlib' — hmac/hashlib are stdlib (pip install unnecessary) but otherwise dependency list is minimal and uses no external download URLs or installers.
Credentials
Requested environment variables are coherent with functionality. However BINANCE_API_KEY/BINANCE_SECRET require trading permissions and are highly sensitive — they allow placing/canceling orders and potentially withdrawing if API permissions are misconfigured. BRAVE_API_KEY and Telegram tokens are reasonable for news/alerts.
Persistence & Privilege
always:false (not force-included). The skill's startup proposes running persistent background loops and scripts write state files to the agent workspace (/root/.openclaw/workspace). Autonomous invocation is allowed (platform default) and the skill will autonomously trade, so this increases blast radius if keys are exposed or misconfigured.
Assessment
This skill appears to be what it claims: an automated Binance Futures trading bot that posts alerts to Telegram and fetches Brave Search news. Key points to consider before installing: - Security of API keys: BINANCE_API_KEY and BINANCE_SECRET are needed and must be treated as highly sensitive. Only provide keys with the minimum permissions required (ideally use a test account or restrict to futures trading only and set IP restrictions on Binance). Do NOT use keys that allow withdrawals. - Auto-trading: The scripts will automatically place and close market orders. Only run on accounts you can afford to lose, and test in a sandbox/demo account first. - Persistent processes & files: The startup and scripts create background loops and write/read state files under /root/.openclaw/workspace; ensure you are comfortable with background processes and local file writes on the host. - Review code yourself: The scanner performs order placement and stop/take profit management; review the full scanner-v8.py content (the provided snippet was truncated) to confirm there are no unexpected network endpoints or logic you disagree with. - Operational hygiene: Ensure Telegram bot is set correctly (bot must be admin in channel), set IP restrictions on Binance keys, rotate keys if you later remove the skill, and run the bot initially with small position sizing or in testnet. - Minor oddities: README suggests pip installing 'hmac' and 'hashlib' (these are standard library modules and do not need pip). The code hardcodes /root/.openclaw/workspace paths — confirm path expectations match your deployment. If you lack experience managing trading API keys or operating automated trading systems, consider not installing or run the code in an isolated/test environment first.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.10
Download zip
binancevk97cxxw1rc0rf9m79yeb6r5329831pe4cryptovk97cxxw1rc0rf9m79yeb6r5329831pe4futuresvk97cxxw1rc0rf9m79yeb6r5329831pe4latestvk979bwcg64v2wrafjnvm0tkvts833jwvtradingvk97cxxw1rc0rf9m79yeb6r5329831pe4

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

🐱📈 Clawdis
Binspython3
EnvBINANCE_API_KEY, BINANCE_SECRET, TELEGRAM_BOT_TOKEN, TELEGRAM_CHANNEL, BRAVE_API_KEY

SKILL.md

Neko Futures Trader 🐱📈

Complete Binance Futures automated trading system.

Quick Setup

# 1. Clone
git clone https://github.com/lukmanc405/neko-futures-trader.git

# 2. Install
pip install requests hmac hashlib

# 3. Configure
cp .env.example .env
nano .env

# 4. Run
nohup python3 scanner-v8.py &
nohup python3 price-monitor.py &

Environment Variables

Create .env file:

BINANCE_API_KEY=your_binance_api_key
BINANCE_SECRET=your_binance_secret
TELEGRAM_BOT_TOKEN=your_telegram_bot_token
TELEGRAM_CHANNEL=your_channel_id
BRAVE_API_KEY=your_brave_api_key

Scripts

scanner-v8.py

Finds trading signals:

  • Scans 500+ USDT pairs
  • Runner detection (volume + momentum + breakout)
  • Real news via Brave Search
  • Posts to Telegram
  • Auto-executes trades
nohup python3 scanner-v8.py > scanner.log 2>&1 &

price-monitor.py

Monitors positions:

  • Checks every 60 seconds
  • Auto-closes when SL/TP hit
  • Fibonacci+ATR based levels
  • Emoji alerts to Telegram
nohup python3 price-monitor.py > price-monitor.log 2>&1 &

Fibonacci+ATR SL/TP

LevelFormula
SLEntry - 1.5×ATR
TP1Entry + 3×ATR (Fib 1.272)
TP2Entry + 4.5×ATR (Fib 1.618)

Alert Templates

Signal Alert

🟢 LONG SIGNAL 🟢

📈 BTCUSDT TECHNICAL ANALYSIS 📊
📊 Chart: https://www.tradingview.com/chart/?symbol=BINANCE:BTCUSDT

📐 MULTI-TF CONFIRMATION:
• Trend 1H: BULLISH
• Structure: BREAKOUT
📊 24h Change: +5.2%

📐 INDICATORS:
• RSI (14): 65.3
• EMA 21: 71234.56
• EMA 50: 70890.12
• ATR: 1234.56

🔊 VOLUME: Volume Spike (2.5x)

📊 STRUCTURE:
• Support: 70000.00
• Resistance: 72000.00

🎯 RUNNER METRICS:
• 1H Momentum: +3.2%
• Volume Spike: 2.5x
• Breakout: ✅ Yes
• Score: 7/10 🚀

💡 INSIGHT: LONG | BREAKOUT | RSI: 65.3
🎯 Entry: $71000.00
📈 TP: $74500.00
🛡 SL: $68000.00
⏰ Timeframe: 1H

📰 Bitcoin surges past $71K as...

✅ ORDER EXECUTED: LONG
📋 Order ID: 123456789 | Status: NEW

Profit Alert

🎉💰 PROFIT TAKEN! 💰🎉

🟢 TIAUSDT LONG
📈 +5.02% ($5.02)
Entry: $0.364600 → Exit: $0.382940
Target: $0.390323 (TP1) 🎯

#TakeProfit #Winning #Crypto

Stop Loss Alert

❌ STOP HIT

🔴 AXSUSDT LONG
📈 -3.12% (-$3.50)
Entry: $1.237000 → Exit: $1.199000
Target: $1.199890 (SL) 🎯

#StopLoss #Trading #Crypto

Configuration

scanner-v8.py

LEVERAGE = 10           # 10x leverage
MAX_POSITIONS = 8       # Max open positions
ENTRY_PERCENT = 5       # % of margin per trade
MIN_GAIN = 0.5          # Min 24h change %

price-monitor.py

CHECK_INTERVAL = 60      # Seconds between checks

Runner Detection

CriteriaWeight
Volume Spike 3x++2
Volume Spike 2x++1
24h Change 10%++2
24h Change 5%++1
1H Momentum 3%++1
Breakout+2

Minimum: 3/10 to trigger

Files

  • scanner-v8.py - Main scanner
  • price-monitor.py - Auto-close monitor
  • .env.example - Template
  • README.md - Full docs
  • SKILL.md - This file

Safety

⚠️ Trading futures involves substantial risk. Only trade with capital you can afford to lose. Monitor positions regularly.


Skill by Neko Sentinel 🐱🛡️

Files

7 total
Select a file
Select a file to preview.

Comments

Loading comments…