pionex-earn-dual
ReviewAudited by ClawScan on May 10, 2026.
Overview
The skill is coherent for Pionex Dual Investment use, but users should notice that it can manage crypto earn investments and requires Pionex API credentials for private actions.
Install only if you intend to let the agent help manage Pionex Dual Investment products. Verify the CLI package, configure a least-privilege API key with only the required permissions, and require explicit confirmation before any non-dry-run invest, revoke, or collect command.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If used incorrectly, the agent could place, revoke, or collect Dual Investment positions on the user's Pionex account after credentials are configured.
These commands can change the user's crypto earn positions, but the skill discloses the impact and requires dry-run plus confirmation.
`earn dual invest`, `revoke_invest`, and `collect` are listed as `WRITE` commands, with the rule: `Dry-run first, confirm before real execution`.
Only proceed after reviewing dry-run output, confirming product ID, amount, profit rate, and client-dual-id, and never allow real execution without explicit approval.
Configured API keys may expose balances and investment records and may allow Earn actions depending on key permissions.
The skill requires account credentials that can view account data and perform Earn operations; this is purpose-aligned but sensitive.
Private commands require API credentials with `View` for balances/history and `Earn` for `invest`, `revoke_invest`, `collect`.
Use a dedicated least-privilege Pionex API key, avoid broader trading or withdrawal permissions, and revoke or rotate the key when no longer needed.
A user must trust the external CLI package before entering Pionex API credentials or performing financial operations.
The skill depends on a globally installed npm CLI and uses it to configure credentials; this is expected for the integration but depends on external package provenance.
`npm install -g @pionex/pionex-ai-kit` and `pionex-ai-kit onboard`
Verify the npm package publisher and Pionex documentation before installing, and prefer a controlled environment for onboarding credentials.