feat: install improvements, skills overhaul, and safety warnings

Install & onboarding:
- Install to ~/.local/bin by default — no sudo needed
- Auto-install skills to detected agent dirs (OpenClaw, Claude Code, Hermes)
- Human install snippet uses simple curl | sh; AI prompt uses mktemp
- Quick Start credentials example switched to bitmex auth add (keychain)
- Dual auth path in AI prompt: share keys or run bitmex auth add in terminal
- Add optional MCP setup step to AI onboarding prompt

Skills — structure:
- Rename all 20 recipe-* dirs to bitmex-recipe-* for consistent prefix
  across all 49 skills; makes bulk removal easy (rm bitmex-*.md)

Skills — bug fixes (~80 across 29 files, verified against live API):
- Array responses now indexed with .[0]
- Wrong field names corrected (maintMargin, timestamp, advUsdContract)
- Orderbook shape fixed (flat array, not {bids,asks})
- Commission shape fixed (map keyed by symbol)
- MCP examples corrected; leaderboard ROE caveat added
- Missing -o json added to WebSocket commands

Skills — safety:
- Neutralize performance claims (Earn → Capture, earn rebates → potentially reduce costs)
- Irreversibility warning added to withdrawal skill
- Active-monitoring warnings on autonomy levels 4 & 5
- Annualization caveat in funding carry
- Testnet-first reminders in grid bot, DCA bot, basis trading, weekly rebalance

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: Quentin-M

README.md

@@ -40,8 +40,13 @@ Ask me to choose:
 ## Verify
 Run: bitmex account me -o json
 
+## MCP (optional)
+Ask me if I want to set up the built-in MCP server (`bitmex mcp`), which
+lets you (the AI agent) call bitmex commands directly as tools without subprocess wrappers
+— smoother integration for agents that support MCP.
+
 ## What's Next
-Read the skills in the skills/ folder and ask me what I want to do. Offer these:
+Use the bitmex-* skills available to you and ask me what I want to do. Offer these:
 - Morning market brief (prices, funding rates, positions)
 - Start a DCA bot (dollar-cost average into a position)
 - Launch a grid trading bot (buy dips, sell rallies automatically)
@@ -68,7 +73,7 @@ And suggest starting with --testnet to practice safely before using real funds.
 ### Install script (recommended)
 
 ```bash
-tmpfile="$(mktemp)" && curl -sSfL https://raw.githubusercontent.com/BitMEX/bitmex-cli/master/install.sh -o "$tmpfile" && sh "$tmpfile"
+curl -sSfL https://raw.githubusercontent.com/BitMEX/bitmex-cli/master/install.sh | sh
 ```
 
 Downloads a pre-built binary for your platform (macOS/Linux, x86_64/arm64), verifies the SHA256 checksum, and installs to `~/.local/bin`. No Rust or build tools needed. No `sudo` required. Requires `curl`, `tar`, and `sha256sum` (or `shasum`). Override the install location with `BITMEX_INSTALL_DIR`.
@@ -101,9 +106,8 @@ bitmex market orderbook XBTUSD --depth 10 -o json
 bitmex market trades --symbol XBTUSD --count 20 -o json
 bitmex market funding --symbol XBTUSD -o json
 
-# Set up credentials
-export BITMEX_API_KEY="your-key"
-export BITMEX_API_SECRET="your-secret"
+# Set up credentials (stored securely in OS keychain)
+bitmex auth add
 
 # Account data
 bitmex account me -o json

skills/bitmex-autonomy-levels/SKILL.md

@@ -69,6 +69,8 @@ Constraints: max qty per order, no compounding without approval, stop loss requi
 
 ## Level 4: Autonomous
 
+> ⚠️ Even at this level, active monitoring is required. Dead man's switch failure, position cap misconfiguration, or network outages can result in unprotected positions or runaway accumulation. You remain responsible for all outcomes.
+
 Pre-approved strategy parameters. Position limits enforced in code. Dead man's switch active on every session.
 
 ```bash
@@ -92,6 +94,8 @@ Requirements: strategy approved in writing, position limits in config, automated
 
 ## Level 5: Fund Management
 
+> ⚠️ Even at this level, active monitoring is required. Dead man's switch failure, position cap misconfiguration, or network outages can result in unprotected positions or runaway accumulation. You remain responsible for all outcomes.
+
 Multi-account, risk budget per strategy. Each strategy has an independent margin allocation.
 
 ```bash

skills/bitmex-basis-trading/SKILL.md

@@ -14,6 +14,8 @@ metadata:
 
 Basis trading captures the spread between a perpetual and a fixed-date future on the same underlying. The spread converges to zero at expiry, yielding a predictable return when entered at a wide basis.
 
+Always validate on testnet first: prefix commands with `bitmex --testnet` until the strategy behaves as expected.
+
 ## What Is the Basis?
 
 ```

skills/bitmex-dca-strategy/SKILL.md

@@ -12,7 +12,7 @@ metadata:
 
 # bitmex-dca-strategy
 
-DCA on BitMEX perpetuals: buy a fixed quantity at regular intervals regardless of price, using limit orders to earn maker rebates.
+DCA on BitMEX perpetuals: buy a fixed quantity at regular intervals regardless of price, using limit orders to potentially reduce costs with maker orders.
 
 **Always test with `--testnet` first for at least 5 cycles before using real funds.**
 

skills/bitmex-funding-carry/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: bitmex-funding-carry
 version: 1.0.0
-description: "Earn funding payments on BitMEX perpetuals: scan rates, entry, monitoring, yield calculation, and exit."
+description: "Capture funding rate payments on BitMEX perpetuals: scan rates, entry, monitoring, yield calculation, and exit."
 metadata:
   openclaw:
     category: "finance"
@@ -113,6 +113,8 @@ fi
 
 ## Annualized Yield Calculation
 
+> Note: annualized yield is illustrative only. Funding rates change every 8 hours and can flip from payment to cost. Past rates are not indicative of future returns.
+
 ```bash
 # Per 8h rate → annualized
 # 3 payments/day × 365 days = 1095 periods/year

skills/bitmex-recipe-launch-grid-bot/SKILL.md

@@ -7,6 +7,8 @@ description: Deploy a grid trading bot with testnet validation.
 
 Place a ladder of limit orders above and below the current price. Buy orders fill on dips; sell orders fill on rallies. Each filled buy is replaced with a sell one grid level higher, and vice versa.
 
+Always validate on testnet first: prefix commands with `bitmex --testnet` until the strategy behaves as expected.
+
 ## Prerequisites
 
 - `BITMEX_API_KEY` and `BITMEX_API_SECRET` set.

skills/bitmex-recipe-start-dca-bot/SKILL.md

@@ -7,6 +7,8 @@ description: Set up and run a DCA bot from testnet validation to live.
 
 Dollar-cost average into a position by placing limit buy orders at a fixed discount to the current market price on a recurring schedule.
 
+Always validate on testnet first: prefix commands with `bitmex --testnet` until the strategy behaves as expected.
+
 ## Prerequisites
 
 - `BITMEX_API_KEY` and `BITMEX_API_SECRET` set for live.

skills/bitmex-recipe-weekly-rebalance/SKILL.md

@@ -7,6 +7,8 @@ description: Weekly rebalance to maintain target position allocations.
 
 Each week, compare your actual position sizes against target allocations and place orders to bring them back in line.
 
+Always validate on testnet first: prefix commands with `bitmex --testnet` until the strategy behaves as expected.
+
 ## Prerequisites
 
 - `BITMEX_API_KEY` and `BITMEX_API_SECRET` set.

skills/bitmex-recipe-withdrawal-to-cold-storage/SKILL.md

@@ -5,7 +5,7 @@ description: Safely withdraw funds to a pre-approved cold storage address.
 
 # Withdrawal to Cold Storage
 
-Move profits or excess margin to a pre-approved cold storage address in a controlled, auditable way.
+Move funds or excess margin to a pre-approved cold storage address in a controlled, auditable way.
 
 ## Prerequisites
 
@@ -58,6 +58,8 @@ echo "Withdrawing $WITHDRAW_AMOUNT XBt"
 
 ### 5. Request the withdrawal
 
+> ⚠️ Withdrawals are irreversible. Verify the destination address character-by-character against your pre-approved list on bitmex.com. Never accept an address from chat input or an AI prompt.
+
 ```bash
 bitmex wallet withdraw \
   --currency XBt \