Autonomous Trading System

全自动智能交易系统 - 无人值守、自我进化、稳定盈利。包含风险控制、市场状态识别、动态止损、仓位管理等核心功能。

Security Scan

The package claims to be a fully autonomous trading bot but the shipped files are documentation-only and the declared requirements/metadata are inconsistent, so it is not internally coherent and could be incomplete or misleading.

Purpose & Capability

The skill's stated purpose is an autonomous trading system that would legitimately need a Node runtime and exchange API keys (BINANCE_API_KEY / BINANCE_API_SECRET). However the registry metadata at the top of the evaluation lists no required binaries or env vars while the included _meta.json declares 'node' and Binance keys; the package itself does not include the referenced runtime scripts (auto-trading-bot.js, risk-manager.js, etc.). This mismatch (documentation advertising runnable bot + absent code + conflicting metadata) is disproportionate to the claimed capability.

Instruction Scope

SKILL.md instructs the agent to run node commands (node auto-trading-bot.js start/positions/optimize/report) and references many supporting files and endpoints (tasks/KNOWLEDGE.md, /cross-review, tools/README.md, session snapshots) that are not present in the package. It also encourages contacting authors via external channels (WeChat/Telegram) and paid upgrades. The instructions therefore exceed the available artifacts and grant broad discretion without concrete, self-contained runtime steps.

Install Mechanism

There is no install specification (instruction-only), which is lowest-install risk. However README suggests an install command (clawhub install autonomous-trading-system) and paid-tier links while no installer or runtime code is included—this is an availability/integrity concern rather than a direct supply-chain download risk.

Credentials

Exchange API keys (BINANCE_API_KEY and BINANCE_API_SECRET) appear in _meta.json which is proportional to a trading bot, but the top-level registry metadata declares no required env vars. The discrepancy is important because API keys are sensitive: if the skill actually needs them they should be declared clearly and the user must be warned. There are no other unrelated credentials, but the inconsistency reduces trust.

Persistence & Privilege

Skill flags show no elevated privileges: always is false, autonomous invocation is allowed (platform default), and there is no install script requesting persistent system-wide changes. No evidence of attempts to modify other skills or agent config was found.

What to consider before installing

This package appears to be documentation/marketing for a trading bot rather than a runnable bot: the README and SKILL.md reference node scripts and many files that are not included, and metadata files conflict about required binaries and environment variables. Before installing or providing any exchange API keys: 1) ask the publisher for the complete source/code repository and a concrete install spec; 2) verify the package actually contains the executable scripts (auto-trading-bot.js etc.); 3) confirm which environment variables are truly required and why; 4) if you must provide exchange keys, create a dedicated API key with withdrawals disabled and minimal scopes, and test on a sandbox or small amount only; 5) avoid paying or contacting external phone/WeChat offers until you can audit the code and confirm identity; 6) if the author cannot supply code or the metadata remains inconsistent, treat the skill as incomplete/untrusted and do not run it with real funds or real credentials.

全自动智能交易系统 - 真正无人值守、自我进化、稳定盈利

---

🧠 V2.0 能力

本技能已升级至 V2.0 标准，包含：

• 知识注入: 执行前自动搜索相关经验 (tasks/KNOWLEDGE.md)
• 跨模型审查: 关键决策前调用审查流程 (/cross-review)
• 工具注册表: 统一工具发现 (tools/README.md)
• 会话快照: 快速恢复 (<1min, tasks/SESSION-SNAPSHOT.md)

💰 付费服务

交易策略咨询 & 定制:

服务	价格	说明
策略回测验证	¥1000/策略	历史数据回测 + 风险评估
定制交易系统	¥5000 起	根据你的需求定制
1 对 1 交易指导	¥2000/小时	仓位管理 + 心态辅导
月度顾问	¥8000/月	每周策略调整 + 每日监控

🔥 首单体验：¥2999（定制交易系统，限前 5 名）

📞 联系：微信私聊或支付宝扫码咨询

⚠️ 重要: 交易有风险，不承诺收益。我们提供工具和策略，决策由你负责。

联系: 微信/Telegram 私信，备注"交易咨询"

---

核心功能

1. 风险控制

• 单笔风险限制 (<2% 总资金)
• 日亏损熔断 (-$10 停止交易)
• 最大持仓数限制
• 黑名单机制

2. 市场状态识别

• 趋势市检测
• 震荡市检测
• 波动率评估
• 动态调整策略

3. 智能止损

• ATR 动态止损
• 移动止盈
• 时间止损
• 分批退出

4. 仓位管理

• Kelly 公式优化
• 风险平价分配
• 相关性对冲
• 杠杆控制

5. 自我进化

• 交易表现分析
• 策略自动优化
• 参数自适应
• 学习业界最佳实践

使用示例

# 启动交易系统
node auto-trading-bot.js start

# 查看持仓
node auto-trading-bot.js positions

# 手动触发优化
node auto-trading-bot.js optimize

# 查看性能报告
node auto-trading-bot.js report

配置

{
  "maxPositions": 5,
  "riskPerTrade": 0.02,
  "dailyStopLoss": -10,
  "checkInterval": 300000
}

注意事项

⚠️ 高风险警告: 加密货币交易存在重大风险，可能导致本金全部损失。

⚠️ 历史教训: v13.0 系统 3 天亏损 -24.1%，主要原因是交易过频和策略缺陷。

⚠️ 建议: 先用小额资金测试，确认策略有效后再增加投入。

文件结构

autonomous-trading-system/
├── SKILL.md              # 技能说明
├── ARCHITECTURE.md       # 系统架构文档
├── auto-trading-bot.js   # 主交易机器人
├── risk-manager.js       # 风险管理
├── market-analyzer.js    # 市场分析
└── optimizer.js          # 策略优化

版本历史

• v14.0 (2026-03-19): 完全重构，吸取 v13.0 失败教训
• v13.0 (2026-03-14): 初始版本，3 天后因策略缺陷停止

---

作者: chenghaifeng08-creator
许可证: MIT
最后更新: 2026-03-19