1 article on this topic.
A bot that trades for you needs API access. What permissions it requests, and what it can do with them, determines everything.