binance-spot-trader

Autonomous Binance spot trading bot with LLM-powered market analysis. Supports momentum trading, mean reversion, and DCA strategies on any Binance spot pair....

Security Scan

The skill's code, required environment variables, and runtime instructions align with its stated purpose (an autonomous Binance spot trading bot that calls an LLM service for sentiment); nothing requested or installed appears unrelated or excessive.

Purpose & Capability

Name/description, required env vars (BINANCE_API_KEY, BINANCE_SECRET_KEY, SKILLBOSS_API_KEY), and the code all line up: the scripts call Binance REST endpoints and the SkillBoss LLM endpoint for sentiment. No unrelated credentials or binaries are requested.

Instruction Scope

SKILL.md instructs running the included setup and trader scripts and creating a .env. The scripts access account balances, place orders, log trades locally, and call the SkillBoss LLM endpoint — exactly what the description promises. They do not read unrelated host files or transmit API secrets to third parties.

Install Mechanism

No complex install spec; setup.sh installs two PyPI packages (httpx, python-dotenv) — standard, minimal, and from a well-known registry. No arbitrary archive downloads or unusual filesystem writes.

Credentials

Requested env vars are proportional: Binance API key/secret are needed to trade and sign requests; SKILLBOSS_API_KEY is used to call the external LLM. The skill does not request unrelated secrets or a large set of environmental access.

Persistence & Privilege

always is false and the skill does not attempt to modify other skills or system-wide agent settings. It runs as a user-level script and writes only local logs/trade records.

Assessment

This skill appears coherent, but it performs real trades and calls an external LLM service. Before installing: (1) only use Binance API keys with withdrawals disabled and IP restrictions; prefer a sub-account with limited funds; (2) review the included scripts yourself or run them in an isolated VM/container; (3) start with paper trading or tiny amounts and monitor activity closely; (4) confirm you trust the SkillBoss provider (api.heybossai.com) since trade-related market snapshots are sent to it (the code does not send your Binance API secret).

Autonomous spot trading bot for Binance. Combines technical indicators with LLM-powered market sentiment analysis to execute trades on any Binance spot pair.

Prerequisites

• Binance account with API keys (spot trading enabled, withdrawal DISABLED)
• SkillBoss API key (uses SkillBoss API Hub for LLM sentiment analysis)
• Python 3.10+

Setup

1. Install

bash {baseDir}/scripts/setup.sh

2. Configure

Create .env:

BINANCE_API_KEY=<your-api-key>
BINANCE_SECRET_KEY=<your-secret-key>
SKILLBOSS_API_KEY=<your-skillboss-api-key>
PAIRS=BTCUSDT,ETHUSDT,SOLUSDT
STRATEGY=momentum
TRADE_SIZE_PCT=5
MAX_POSITIONS=5

3. Run

python3 {baseDir}/scripts/trader.py

Or via cron:

*/5 * * * * cd /opt/trader && python3 trader.py >> trader.log 2>&1

Strategies

Momentum (default)

• Buys when price crosses above 20-EMA with volume spike
• Sells when price crosses below 20-EMA or hits TP/SL
• Best for trending markets (BTC, ETH, SOL)

Mean Reversion

• Buys when RSI < 30 (oversold) and price near Bollinger Band lower
• Sells when RSI > 70 (overbought) or price near upper band
• Best for range-bound markets

DCA (Dollar Cost Average)

• Buys fixed amount at regular intervals regardless of price
• Configurable interval (hourly, daily, weekly)
• Lowest risk strategy for long-term accumulation

LLM-Enhanced (all strategies)

• Before each trade, calls SkillBoss API Hub for market sentiment analysis
• Evaluates: recent news, price action, volume patterns, market structure
• Can veto a trade signal if sentiment is strongly against

Trading Parameters

Parameter	Default	Description
PAIRS	BTCUSDT	Comma-separated trading pairs
STRATEGY	momentum	momentum, mean_reversion, or dca
TRADE_SIZE_PCT	5	% of portfolio per trade
MAX_POSITIONS	5	Max concurrent open positions
TAKE_PROFIT_PCT	5	Take profit %
STOP_LOSS_PCT	3	Stop loss %
DCA_INTERVAL	daily	For DCA: hourly, daily, weekly
DCA_AMOUNT_USDT	50	USDT per DCA buy
USE_LLM	true	Enable LLM sentiment filter

Monitoring

# Check portfolio
python3 {baseDir}/scripts/portfolio.py

# View trade history
tail -50 trades.jsonl

# Check logs
tail -f trader.log

⚠️ Security Considerations

• NEVER enable withdrawal on API keys — trading only
• IP-restrict your API keys on Binance
• Use a sub-account with limited funds for bot trading
• Start with tiny amounts ($50-100) and paper trade first
• Monitor actively during first 24 hours
• Set up Binance email alerts for all trades
• API keys on disk — secure your server (SSH keys only, firewall, chmod 600)

References

• See references/binance-api.md for REST API docs
• See references/indicators.md for technical analysis details