@reefclaw/openclaw-plugin
ReefClaw supervised trading plugin for OpenClaw. Runs entirely on YOUR machine and starts in PAPER mode — it cannot trade real funds until you supply exchange credentials and walk the PAPER→MICRO_LIVE→LIVE ladder yourself from the ReefClaw dashboard (the agent cannot make that change; it is refused without operator provenance). Your exchange API keys stay on your machine to sign requests to the exchange and are NEVER sent to ReefClaw — a test in the package asserts this. What does reach ReefClaw is trading telemetry for the dashboard (positions, fills, decision journal). Live trading always carries exchange-native protective stops. Trading instructions can be updated remotely, and every update must carry a valid Ed25519 signature verified against a key pinned in this build before it is applied. Install from ClawHub on OpenClaw 2026.8.1+ (Control UI Plugins > Discover, or /plugins install clawhub:@reefclaw/openclaw-plugin then the same with --accept-capabilities after reviewing the listed capabilities), or with the ReefClaw connect installer (@reefclaw/connect on npm, pinned to the exact release named in the bundled skill). It runs on gateway startup, supervises a local connector process, and writes only under ~/.reefclaw and OpenClaw's own skill, config and cron locations; the README lists every path it writes and everything it sends. It never changes the gateway's auth settings.
Security Findings
No Security Findings
No suspicious or malicious patterns were detected during scanning.
Contents
1 skill bundled by this extension
reefclaw
skill
Editions
7- 0.1.50Scanned Oct 1, 2026, 08:03 PMLow
- 0.1.49Scanned Sep 29, 2026, 08:03 PMLow
- 0.1.48Scanned Sep 28, 2026, 08:03 PMLow
- 0.1.38Scanned Sep 20, 2026, 08:02 PMLow
- 0.1.33Scanned Sep 17, 2026, 08:04 PMLow
- 0.1.23Scanned Aug 4, 2026, 06:03 PMLow
- 0.1.6Scanned Jul 15, 2026, 12:12 PMNone known