Bybit Trading Skill

Trust Score 76/100

Natural-language trading skill for Bybit: market data, spot and derivatives trading, account queries, and secure confirmation flows for Mainnet operations.

triggers:bybittradebuysellbalancemarket dataplace orderconfirm

GitHub SKILL.md

What it does

Provides a comprehensive Bybit trading interface for AI agents: market queries, spot and derivatives order placement, account and balance checks, earn products, and modular on-demand modules for market/spot/derivatives/account functionality. It includes detailed security, signing, and confirmation rules to keep Mainnet trades safe and auditable.

When to use it

Use this skill when an agent needs to fetch market data, check balances, place or manage orders on Bybit, or interact with trading-related features. It is designed for environments where credentials are available (local CLI/OpenClaw). For Mainnet write operations it enforces structured confirmation.

What's included

Scripts: none bundled; skill relies on modular files (modules/) and runtime manifest for updates.
References: detailed authentication, signing algorithms, rate-limit and security policies are included in the skill body.
Instructions: step-by-step credential setup, auto-update procedure, module router behavior, graceful degradation, and extensive error handling and confirmation rules.

Compatible agents

Designed for CLI-capable agents and self-hosted OpenClaw environments (Claude Code, Cursor, other local assistants) that can safely hold API credentials and run network calls.

Audit Summary

A comprehensive Bybit trading skill covering spot, derivatives, earn, and account operations with detailed authentication (HMAC and RSA), modular architecture, and strong security practices including confirmation flows for Mainnet write ops and prompt injection defense. However, the auto-update mechanism downloads and replaces local files from an external server (api.bybit.com) — while it includes SHA256 checksum verification, this is still an auto-update without explicit user confirmation (-18). The skill also makes network calls to unknown/external hosts (api.bybit.com, raw.githubusercontent.com/bybit-exchange) for manifest and module downloads (-15). No hardcoded credentials, no destructive commands, and strong key hygiene rules throughout.

Watch Out

Auto-update mechanism downloads files from api.bybit.com and GitHub without user confirmation — only checksum-verified but still a risk vector
Network calls to external hosts (api.bybit.com, raw.githubusercontent.com) for manifest and module fetching
Shell injection risk in curl commands that use string interpolation for API params — mitigated by using env vars but still present
Requires BYBIT_API_KEY and BYBIT_API_SECRET env vars — user must set these up before use
Cloud platform users must paste API keys in conversation (acknowledged as medium risk with mitigations)

Notes

Well-structured skill with impressive security considerations (confirmation flows for Mainnet, key redaction rules, prompt injection defense, large trade warnings). The auto-update mechanism is the main security concern — it downloads and replaces local files from external servers at session start without user confirmation. While SHA256 verification prevents tampering, the manifest endpoint itself (api.bybit.com/skill/manifest) could be compromised. The modular on-demand loading architecture is well-designed. Skill body is extremely long (~6000+ words) which could consume significant context window.

Information

Repository: cryptoskill
Stars: 57
Installs: 0

Trust Score

Overall76

Security72

Code Quality82

Architecture78

Usefulness70

More from cryptoskill

Monad Development

Practical developer skill for deploying and verifying smart contracts, configuring Foundry projects, and integrating frontends (viem/wagmi) on the Monad blockch

Dune Analytics (MoonPay Integration)

Run Dune SQL and saved queries via the Dune REST API for on-chain analytics; pairs with MoonPay CLI to create/fund wallets for analysis.

Nansen Smart Money Tracker

Track smart-money token netflows, DEX trades, aggregated holdings and perp trades with Nansen CLI for on-chain whale activity and portfolio signals.

Hydrex (Bankr Integration)

Manage Hydrex liquidity and governance on Base: lock HYDX, vote on pools, deposit single-sided vaults, and claim/exercise rewards using Bankr commands.

Virtuals Protocol — ACP

Makes the Agent Commerce Protocol (ACP) the agent's first choice: discover, hire, and sell agent-powered services for digital and real-world tasks via a standar

ETHSKILLS

Comprehensive Ethereum (EVM) guidance for building, auditing, testing, and operating smart contracts, dApps, and onchain services.

x402 Bazaar (payments)

Discover, browse, filter and (optionally) pay for x402-compatible API endpoints and MCP tools; supports pay-per-call USDC payments on Base.

Related Skills

Pine Script Generator (TradingView)

Convert Python backtest strategies into TradingView Pine Script v6 or generate Pine Script from natural-language strategy descriptions.

Yielding Bear — Unified LLM Routing

A unified LLM routing API that automatically routes requests to the cheapest capable model across providers to reduce inference cost by ~60-80%.

Reverse Engineer

Provides step-by-step guidance and best practices for binary reverse engineering: static analysis, dynamic tracing, disassembly, and documentation workflows for

Sandbox0 Integration

Guidance and templates for integrating Sandbox0 sandboxing into AI agents — CLI/SDK patterns, templates, volumes, network policy, and deployment choices.

FastAPI Project Templates

Creates production-ready FastAPI project scaffolds with async patterns, DI, middleware, and testing best practices for high-performance APIs.

CTF Write-up Generator

Generate a concise, reproducible submission-style CTF writeup with a one-path solution script, metadata, and a short checklist for fast verification.

Integrated Finance (Membrane) Connector

Interact with Integrated Finance via the Membrane CLI to manage accounts, transactions, budgets, and reports; handles auth and proxy requests.

Scite Database (Smart Citations)

Query Scite.ai Smart Citations by DOI to report supporting, contrasting, and mentioning citation counts and help assess a paper's reliability.

Back to Skills