If you're noob in crypto you must know that this is very risky. Because dev of this bot can robbed your money. Better write this bot by yourself.
That's not 100% correct.
1. Double check that you disable Withdrawals when creating API key - so no bot can withdraw any funds.
2. Create a blacklist for coins that should not be traded (or a whitelist for those which shall be traded) - most bots offer this Feature.
So, at which Point can the dev steal your Money?
There is no way for any bot to steal your money until and unless you give them a chance to do so. There are many people working for themselves on the bots like managing their hot and cold list identifying various currencies to which one to hold and which to be traded. Bots are the easy way for alts trading.