crypto-trader

This package appears to be a genuine automated trading tool, but take precautions before enabling it: - Start in paper/testnet mode (CRYPTO_DEMO=true) — do not set CRYPTO_DEMO=false until you've fully tested behavior. - Use API keys with minimal permissions: create sandbox/testnet API keys and disable withdrawals on any real exchange keys. Prefer keys limited to trading and reading balances. - The skill references additional tokens (Telegram, Discord, CryptoPanic, Twitter, other exchanges) but only Binance creds are declared as required; review and decide which optional tokens you will provide. - The SKILL.md asks you to pip install many packages (including torch/transformers). Install in an isolated virtualenv or container to avoid polluting your system Python. - The monitor daemon persists state and writes PID files under your home directory (~/.openclaw). Inspect those files and the code (monitor_daemon.py, notifier, exchange_manager) before running to confirm where data is stored and where notifications are sent. - Review source files (especially exchange_manager, notifier, and scripts/main.py) to verify there are no unexpected network endpoints or hardcoded URLs. If you cannot audit, run the skill in an isolated sandbox VM or container with limited network access first. - Consider running unit tests and backtests (these are included) and exercising the code with mock exchange objects before attaching real API keys. - If you allow autonomous/crontab invocation, be explicit about what triggers live trading (e.g., ensure confirmations are enforced and that the agent will not start live strategies without explicit user approval). If you want, I can: list exact lines where optional env vars are read, summarize notifier/exchange_manager behavior, or point out files to review first (exchange_manager.py, notifier.py, scripts/main.py, monitor_daemon.py).