OKX Trader

Automated OKX trading skill with dual-grid strategies, auto-rescaling, and risk controls for managing orders and monitoring account performance.

Security Scan

The skill's code and runtime instructions match its stated purpose (automated OKX grid trading) and request the expected OKX API credentials; no hidden endpoints or unrelated privileges were found, though there are minor manifest inconsistencies and expected operational risks (automatic trading, file writes) you should review before use.

Purpose & Capability

The skill's name, README, SKILL.md, scripts, and lib/okx-client.js consistently implement an OKX grid trading agent and legitimately require OKX API credentials and local config files. However, the provided registry summary at the top of the package metadata (which listed 'Required env vars: none') conflicts with the included skill.json/README/SKILL.md that declare OKX API env vars and node as a required binary. This appears to be a packaging/metadata mismatch rather than a capability mismatch.

Instruction Scope

The SKILL.md and scripts instruct the agent to read and write local files under /root/.openclaw/workspace/okx_data (config.json, grid_settings.json, logs, snapshots) and to call OKX API endpoints for market data, orders, fills, and balances. These actions are within the stated purpose. Important runtime effects: the bot will perform real trades (unless OKX_IS_SIMULATION=true), can cancel/place orders, and will persist rescaled grid settings to grid_settings.json and append audit/snapshot files. There are no instructions to read unrelated system config or exfiltrate data to third-party endpoints.

Install Mechanism

No external install/download step is present; the package is delivered as code files. There are no external URLs, archive extracts, or third-party installers in the manifest. This is lower-risk from an install mechanics perspective.

Credentials

The skill requires OKX API key, secret, passphrase and an OKX_IS_SIMULATION flag (declared in skill.json and used as fallbacks in code). Those credentials are necessary and proportionate for a trading bot. The code reads creds from config.json or environment variables, which matches the declared envs. The only proportionality concern is the earlier metadata mismatch that omitted these required env vars — verify what the platform will actually request or provide when enabling the skill.

Persistence & Privilege

The skill does not request always:true and does not modify other skills. It persists state under /root/.openclaw/workspace/okx_data by updating grid_settings.json, writing audit logs, and saving daily snapshots. The manifest also includes cronTemplates for scheduled autonomous runs (every 5 minutes and hourly/daily tasks). Combined with normal autonomous invocation, this means the skill can place/cancel orders on a schedule — a normal behavior for a trading bot but operationally impactful if run against live funds.

Assessment

This package appears to implement what it claims (an OKX grid trading bot) and asks for the expected OKX API keys. Before enabling or running it: 1) Use a dedicated test account and set OKX_IS_SIMULATION=true to confirm behavior; do not use main funds until you’ve tested. 2) Create API keys with the minimal required permissions (enable Trade only; explicitly disable Withdrawals). 3) Inspect and back up grid_settings.json and config.json: the bot will rewrite grid_settings.json during rescale. 4) Review cronTemplates/schedule: the package includes scheduled tasks (5-min maintenance, hourly report, daily snapshot) — disable or adjust schedules if you do not want automatic runs. 5) Confirm how the platform supplies environment variables (the package metadata and the registry summary disagree about required env vars). 6) Consider running the code in an isolated environment and monitoring API activity / logs; rotate keys after testing. If you are not comfortable reviewing or running code that can place/cancel real orders automatically, do not install this skill or restrict it to simulation-only accounts.

OKX Trader Skill

A professional-grade automated trading agent skill for OKX. This skill enables the AI agent to manage grid trading strategies, monitor account performance, and handle market execution with built-in safety protocols.

System Capabilities

1. Dual-Grid Execution

The agent operates two concurrent strategies:

• Macro Grid (Main): Heavy positions for capturing major trend movements.
• Micro Grid: High-frequency scalp positions for extracting profit from minor volatility.

Supports multiple instruments (e.g., BTC-USDT, ETH-USDT) via named configurations in grid_settings.json.

2. Auto-Trailing (Rescale) Logic

The skill automatically detects when the market price drifts outside the active grid range. It performs a "Rescale" operation:

• Cancels all legacy orders associated with the bot.
• Recalculates and re-centers the grid layout based on the current market ticker.
• Persists new range settings to grid_settings.json.

3. Risk Management & Protection

• Cost Basis Guard: Prevents the agent from placing sell orders below the average entry price (including a minimum profit buffer).
• Inventory Control: Respects maxPosition limits to prevent over-leveraging during extended downtrends.
• Order Throttling: Built-in delays and batch execution to prevent rate-limiting and improve efficiency.

Available Tools

okx_report

Generates a highly condensed PnL and status report. Automatically detects all configured instruments from grid_settings.json and reports per-grid statistics.

okx_grid_maintain

The core execution tool that maintains the grid structure. Supports any number of grid configurations (e.g., main, micro, eth_micro).

okx_snapshot

Records a daily account snapshot including balances, prices, 24h trading summary, and day-over-day equity comparison. Data is saved to okx_data/snapshots/YYYY-MM-DD.json.

Internal Dependencies

Requires the following local files in /root/.openclaw/workspace/okx_data/:

• config.json: API credentials.
• grid_settings.json: Strategy parameters.

⚠️ RISK WARNING

Trading cryptocurrencies involves significant risk. This skill is provided "as is" without warranties.

• Simulation First: Always test with OKX_IS_SIMULATION=true before using real funds.
• Permissions: Use API keys with "Trade" permissions only. Disable "Withdrawal" permissions.

---

OKX Trader Skill (中文说明)

一个专为 OKX 交易所设计的专业级自动化交易技能。该技能使 AI 代理能够管理网格交易策略、监控账户表现，并具备内置安全协议的行情执行能力。

系统功能

1. 双层网格执行

代理同时运行两种策略：

• 大网格 (Main): 使用较大仓位，旨在捕捉主要的市场趋势运动。
• 小网格 (Micro): 高频剥头皮仓位，旨在从微小的波动中提取利润。

支持多交易对（如 BTC-USDT、ETH-USDT），通过 grid_settings.json 中的命名配置管理。

2. 自动跟随 (Rescale) 逻辑

技能会自动检测市场价格何时偏离活跃网格区间。它执行“Rescale”操作：

• 取消与该机器人相关的所有旧订单。
• 根据当前市场价格重新计算并居中网格布局。
• 将新的区间设置持久化到 grid_settings.json。

3. 风险管理与保护

• 成本基准保护: 防止代理以低于平均入场价的价格下达卖单（包括最小利润缓冲）。
• 库存控制: 遵守 maxPosition 限制，防止在持续下跌趋势中过度加仓。
• 订单节流: 内置延迟和批量执行，防止 API 频率限制并提高效率。

可用工具

okx_report

生成高度压缩的损益（PnL）和状态报告。自动从 grid_settings.json 检测所有已配置的交易对，按网格分别统计。

okx_grid_maintain

维护网格结构的核心执行工具。支持任意数量的网格配置（如 main、micro、eth_micro）。

okx_snapshot

记录每日账户快照，包括余额、价格、24h 交易汇总及逐日权益对比。数据保存至 okx_data/snapshots/YYYY-MM-DD.json。

内部依赖

需要在 /root/.openclaw/workspace/okx_data/ 中存在以下本地文件：

• config.json: API 凭据。
• grid_settings.json: 策略参数。

⚠️ 风险提示

加密货币交易涉及巨大风险。本技能按“原样”提供，不作任何保证。

• 模拟优先: 在使用真实资金之前，务必先开启模拟盘测试 (OKX_IS_SIMULATION=true)。
• 权限控制: 仅使用具备“交易”权限的 API 密钥。务必禁用“提现”权限。