If you're noob in crypto you must know that this is very risky. Because dev of this bot can robbed your money. Better write this bot by yourself.
That's not 100% correct.
1. Double check that you disable Withdrawals when creating API key - so no bot can withdraw any funds.
2. Create a blacklist for coins that should not be traded (or a whitelist for those which shall be traded) - most bots offer this Feature.
So, at which Point can the dev steal your Money?