Kraken

Query Kraken crypto account balances, portfolio, trades, and staking positions.

Security Scan

The skill's code and instructions require your Kraken API key/secret and Python dependencies, but the registry metadata does not declare those required credentials or an install step — this mismatch is a red flag you should review before installing.

Purpose & Capability

The skill claims to query Kraken account data and the code + SKILL.md legitimately use Kraken API clients and require KRAKEN_API_KEY / KRAKEN_API_SECRET. However, the skill registry metadata lists no required environment variables or primary credential, which is inconsistent with the stated purpose.

Instruction Scope

The runtime instructions and code are focused on calling Kraken's SDK (market, user, earn, funding endpoints) and reading a .env file in the skill directory. The SKILL.md instructs the user to export Kraken credentials or put them in .env; there are no instructions to read unrelated system files or exfiltrate data to other endpoints.

Install Mechanism

There is no install spec (low risk from downloads), but requirements.txt lists python-kraken-sdk and python-dotenv. Because dependencies are not declared in the registry/install step, the runtime may fail or an operator may need to install dependencies manually. No remote installers or obscure URLs are present in the provided files.

Credentials

The code and SKILL.md clearly expect KRAKEN_API_KEY and KRAKEN_API_SECRET (and will load a .env in the skill directory), but requires.env and primary credential are empty in the registry. That mismatch could lead users to provide credentials without the registry surface making that requirement explicit. The keys requested are proportional to the task, but the omission in metadata is a governance/visibility problem.

Persistence & Privilege

The skill does not request always:true, does not modify other skills, and only reads a .env from its own directory. It does not appear to persist credentials beyond reading environment variables/.env. Agent autonomous invocation remains enabled (the platform default), which is expected for skills but not itself a disqualifier.

What to consider before installing

Before installing or running this skill: 1) Be aware the code and README ask you to provide KRAKEN_API_KEY and KRAKEN_API_SECRET (via env vars or a .env file). The registry metadata does NOT list these — validate this mismatch with the publisher. 2) Prefer creating read-only / minimal-permission API keys (Query Funds / Earn read-only) rather than keys that allow trading or withdrawals. 3) Review the full source files locally (kraken_api.py, kraken_cli.py) for any hidden network calls or unexpected file I/O (the snippets appear focused on Kraken SDK calls, but review the truncated parts). 4) Install dependencies (python-kraken-sdk, python-dotenv) in an isolated environment (virtualenv) because there is no automatic installer. 5) Consider running the skill in a sandboxed environment and avoid reusing high-privilege API keys. 6) Because the skill source has no homepage and an unknown publisher, exercise extra caution — ask the publisher for provenance and request the registry be updated to explicitly declare required env vars and required permissions.

Kraken Crypto Skill

Use the kraken_cli.py wrapper to query your Kraken account.

Setup

Export your Kraken API credentials.

export KRAKEN_API_KEY="your_api_key"
export KRAKEN_API_SECRET="your_api_secret"

You can also create a .env file in the skill directory.

1. Primary Commands

Use these commands for portfolio queries. They calculate totals automatically.

Command	Description
summary	Portfolio overview with correct totals
net-worth	Total net worth calculation
performance	Returns compared to deposits
holdings	Asset breakdown with USD values
staking	Staking positions and rewards

Example Output summary

TOTAL NET WORTH
  Main Wallet (Equity):    $544.95
  Earn Wallet (Bonded):    $81.89
  TOTAL:                   $626.84

AUTO EARN (Flexible) in Main Wallet
  BTC   : $493.92 (rewards: $0.03)
  ETH   : $50.66 (rewards: $0.11)

BONDED STAKING in Earn Wallet
  SOL   : $66.73 (rewards: $0.89)
  DOT   : $15.16 (rewards: $0.55)

  Total Staking Rewards:   $1.71

The wrapper separates Auto Earn from Bonded staking to avoid double counting.

2. Raw API Commands

These commands use kraken_api.py for detailed data. Use them for specific information not covered by primary commands.

Market Data Public

Command	Description	Use Case
ticker --pair XXBTZUSD	Current price and 24h stats	Price checks
ohlc --pair XXBTZUSD	Historical candles	Chart data
depth --pair XXBTZUSD	Order book	Liquidity analysis
recent-trades --pair XXBTZUSD	Live trades	Market activity
assets	Asset names and decimals	Asset lookups
pairs	Valid trading pairs	Pair discovery
status	Exchange status	Connectivity check
time	Server time	API health check

Account Data Private

Command	Description	Use Case
balance	Raw asset quantities	Detailed holdings
balance-ex	Balance with reserved funds	Margin analysis
portfolio	Trade balance in USD	Raw equity data
open-orders	Active orders	Order management
closed-orders	Completed orders	Order history
trades	Trade execution history	Trade analysis
ledger	All transactions	Transaction tracking
ledger --asset ZUSD	Filtered by asset	Asset history
volume	30 day volume	Fee tier info

Earn Data Private

Command	Description	Use Case
earn-positions	Raw staking allocations	Detailed staking data
earn-strategies	Available yield programs	Strategy discovery
earn-status	Pending stakes	Allocation monitoring
earn-dealloc-status --refid ID	Pending unstakes	Deallocation monitoring

Funding Private

Command	Description	Use Case
deposits-methods	Available deposit methods	Deposit options
deposits-address --asset BTC	Wallet address	Receiving crypto

3. Critical Caveats

Double Counting Warning

Do not add balance and earn-positions together.

Kraken has two staking types.

• Auto Earn Flexible assets stay in the Main wallet. These are included in portfolio equity.
• Bonded Staking assets move to the Earn wallet. These are not in portfolio equity.

The summary command handles this correctly. If you use raw commands manually follow this logic.

• Correct calculation is Total equals Portfolio Equity plus Bonded Earn Only.
• Incorrect calculation is Total equals Portfolio Equity plus All Earn Allocations.

API Response Notes

• ohlc returns a list under the pair key.
• depth bids and asks are nested under the pair key.
• recent-trades returns a list containing price, volume, time, side, type, and misc.
• earn-strategies uses the items key with apr_estimate.

4. Example Usage

User Request	Bot Action
What is my crypto portfolio?	Run summary
What is my net worth?	Run net-worth
How am I performing?	Run performance
Show my holdings	Run holdings
Show my staking	Run staking
What is BTC price?	Run ticker --pair XXBTZUSD
Show my open orders	Run open-orders
Show my trade history	Run trades
Get my BTC deposit address	Run deposits-address --asset BTC

5. API Key Permissions Required

Feature	Permission
Balance and Portfolio	Query Funds
Orders and Trades and Ledgers	Query Funds
Earn Allocations	Earn
Deposit Addresses	Query Funds
Market Data	None