Bybit Exchange AI Trading Skill
ReviewAudited by ClawScan on May 10, 2026.
Overview
The visible artifacts describe a coherent Bybit trading integration, but it can use your API key to perform real-money financial actions, so it should be used with strict limits and confirmations.
Install this only if you intend to let an AI assistant help operate a Bybit account. Start on testnet, use a dedicated low-balance sub-account, enable Read + Trade only, never enable Withdraw, store credentials only in secure environment variables, and manually verify every mainnet order, bot, copy-trading, earn, transfer, or borrowing action before confirming.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Users should not assume Bybit has reviewed or endorsed this skill.
The package itself discloses that it is not official Bybit software, which matters because the skill controls financial-account actions.
This is a community-maintained skill package for the Bybit API... do not treat this package as official Bybit software.
Use testnet first, review the bundled instructions, and prefer a dedicated low-balance sub-account.
If the credentials are over-scoped or misused, the agent could make trades or other account changes that affect funds.
The skill needs a Bybit API key plus signing material, giving the agent delegated ability to read account data and place trades.
BYBIT_API_KEY... Read + Trade permissions only; never enable Withdraw ... BYBIT_API_SECRET ... BYBIT_API_PRIVATE_KEY_PATH ... sensitive: true
Create a dedicated Bybit sub-account, enable only Read + Trade, never enable Withdraw, IP-restrict the key, and keep the balance limited.
A mistaken or misunderstood instruction could place orders, change leverage, or otherwise create financial loss if confirmed.
The skill exposes high-impact trading operations, but the visible documentation also requires explicit confirmation for mainnet writes.
Spot | Market/limit orders... Derivatives | Long/short, leverage... Trade confirmation | Every mainnet write operation shows a structured summary card — user must type CONFIRM
Read every confirmation card, verify symbol, side, amount, leverage, account, and environment before typing CONFIRM.
An approved bot or copy-trading configuration may continue to create gains or losses until stopped or adjusted.
Bots and copy-trading setups can keep trading after the initial request, so one approved setup may have continuing account impact.
Trading Bot | Spot/futures grid bots, DCA bots, martingale, combo bots ... Copy Trading | Follow top traders
Use small limits, set stop-loss/take-profit controls where available, monitor active bots and copy relationships, and know how to close them manually.