← Back to Skills Marketplace
hieuhani

EntradeX

by Hieu Tran · GitHub ↗ · v0.1.16
cross-platform ✓ Security Clean
535
Downloads
2
Stars
0
Active Installs
17
Versions
Install in OpenClaw
/install entradex
Description
Use the EntradeX CLI for DNSE workflows. Use when (1) setting DNSE API credentials via env vars or config file, (2) reading account, market, and order data,...
README (SKILL.md)

EntradeX CLI

Install

npm i -g entradex-cli

Usage

entradex [global-options] [command]

Configuration

Credential priority order:

  1. Config file (~/.entradex-cli/config.json) - recommended
  2. Environment variables (DNSE_API_KEY, DNSE_API_SECRET)
  3. Global command options (--api-key, --api-secret)

Setup and inspect config:

entradex config set --key "\x3Capi-key>" --secret "\x3Capi-secret>"
entradex config set
entradex config get
entradex config clear

Security & Safety

Before using this skill:

  • Verify the npm package: npm view entradex-cli - check author is hieuhani and repository matches
  • Inspect package contents: npm pack entradex-cli --dry-run or view on npmjs.com
  • Treat DNSE_API_KEY and DNSE_API_SECRET as highly sensitive trading credentials

Autonomous execution warning:

  • This skill can place real trades using provided credentials
  • Consider using a separate limited-permission account
  • Rotate API keys if you suspect unauthorized access

Global Options

  • --api-key \x3Ckey> DNSE API key
  • --api-secret \x3Csecret> DNSE API secret
  • --base-url \x3Curl> API base URL (default: https://openapi.dnse.com.vn)
  • --debug Show request details
  • -V, --version Show CLI version
  • -h, --help Show help

Commands

Config

entradex config set [--key \x3Ckey>] [--secret \x3Csecret>] [--url \x3Curl>]
entradex config get
entradex config clear

Account

entradex account list
entradex account balances \x3CaccountNo>
entradex account loan-packages \x3CaccountNo> \x3CmarketType> [--symbol \x3Csymbol>]

Trade

entradex trade order \x3CmarketType> \x3Csymbol> \x3Cside> \x3CorderType> \x3Cprice> \x3Cquantity> \x3CtradingToken> [--price-stop \x3Cprice>]
entradex trade modify \x3CaccountNo> \x3CorderId> \x3CmarketType> \x3Csymbol> \x3Cside> \x3CorderType> \x3Cprice> \x3Cquantity> \x3CtradingToken> [--price-stop \x3Cprice>]
entradex trade cancel \x3CaccountNo> \x3CorderId> \x3CmarketType> \x3CtradingToken>

Parameters:

  • marketType (enum): STOCK, DERIVATIVE
  • side (enum): NB (buy), NS (sell)
  • orderType (enum): ATO, ATC, LO, MTL, MOK, PLO
    • ATO: At The Opening
    • ATC: At The Close
    • LO: Limit Order
    • MTL: Market To Limit
    • MOK: Market Order Kill
    • PLO: Post Limit Order
  • price (number): unit price; follow DNSE tick-size/market constraints
    • If orderType=LO, price must be greater than 0.
    • If orderType is anything other than LO (ATO, ATC, MTL, MOK, PLO), price must be exactly 0.
  • quantity (integer): order quantity; must satisfy market lot rules
    • For marketType=STOCK, valid quantity is either:
      • Board lot: multiples of 100 (100, 200, ...)
      • Odd lot: integers from 1 to 99
    • For marketType=STOCK, values like 101, 102, ... are invalid odd lots and must be rejected.
  • tradingToken (string): token from entradex auth create-token

Normalization rules for user intent:

  • If user says buy/sell, map to NB/NS.
  • Uppercase enum-style params before execution (marketType, side, orderType).
  • If user provides an unsupported enum value, stop and ask for a valid value.
  • If orderType is not supported by the target market/session, stop and ask user to choose a supported type.

Order

entradex order list \x3CaccountNo> \x3CmarketType>
entradex order detail \x3CaccountNo> \x3CorderId> \x3CmarketType>
entradex order history \x3CaccountNo> \x3CmarketType> [--from \x3Cdate>] [--to \x3Cdate>] [--page-size \x3Csize>] [--page-index \x3Cindex>]
entradex order deals \x3CaccountNo> \x3CmarketType>

Market

entradex market secdef \x3Csymbol> [--board-id \x3Cid>]
entradex market ppse \x3CaccountNo> \x3CmarketType> \x3Csymbol> \x3Cprice> \x3CloanPackageId>

Auth

entradex auth send-otp \x3Cemail> [--otp-type \x3Ctype>]
entradex auth create-token \x3CotpType> \x3Cpasscode>

Dry Run

entradex dry-run accounts
entradex dry-run balances \x3CaccountNo>
entradex dry-run order \x3CmarketType> \x3Csymbol> \x3Cside> \x3CorderType> \x3Cprice> \x3Cquantity> [--price-stop \x3Cprice>]

Common Workflow

# 1) Configure credentials
entradex config set

# 2) Send OTP
entradex auth send-otp [email protected]

# 3) Create trading token with passcode
entradex auth create-token smart_otp \x3Cpasscode>

# 4) Place an order
entradex trade order STOCK VIC NB LO 15000 100 \x3Ctrading-token>
Usage Guidance
This skill appears coherent for a trading CLI: it needs the entradex binary (npm package) and your DNSE API key/secret. Before installing or granting credentials: (1) inspect the npm package and repository (SKILL.md suggests doing so), (2) consider using a limited-permission trading account or API key for autonomous runs, (3) avoid storing long-lived master keys in shared environments, and (4) rotate keys if suspicious activity occurs. NPM packages can run code on install and at runtime — verify the package author/repo before installing.
Capability Analysis
Type: OpenClaw Skill Name: entradex Version: 0.1.16 The skill bundle is designed to interact with the EntradeX CLI for trading, which inherently involves high-risk actions (real trades) and sensitive credentials (DNSE_API_KEY, DNSE_API_SECRET). However, the `SKILL.md` file is transparent about these capabilities and explicitly warns the user about the risks, recommending verification of the `entradex-cli` npm package and caution with credentials. There is no evidence of prompt injection against the agent, data exfiltration, malicious execution, persistence mechanisms, or obfuscation within the skill bundle itself. The skill's functionality aligns with its stated purpose, and the security warnings indicate responsible design rather than malicious intent.
Capability Assessment
Purpose & Capability
Name/description (EntradeX CLI for DNSE trading) align with required binaries (entradex), required env vars (DNSE_API_KEY, DNSE_API_SECRET), and declared install (npm entradex-cli). All requested items are reasonable for a trading CLI.
Instruction Scope
SKILL.md describes only installing/using the CLI, configuring credentials (config file or env), and running account/market/trade commands. It does not instruct reading unrelated system files or exfiltrating data. It explicitly warns that the CLI can place real trades.
Install Mechanism
Install is an npm package (entradex-cli) that provides the entradex binary — this matches the declared requirement. npm packages can execute arbitrary code during install/runtime, so verifying package source (as the SKILL.md suggests) is sensible; the install method itself is proportionate to the skill's purpose.
Credentials
Only DNSE_API_KEY and DNSE_API_SECRET are required and DNSE_API_KEY is declared as primaryEnv. These credentials are expected for a trading CLI. No unrelated secrets or many disparate credentials are requested.
Persistence & Privilege
always:false (no forced presence). The skill can be invoked autonomously (platform default) but that is not by itself a concern; the SKILL.md warns about real trades and suggests mitigations.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install entradex
  3. After installation, invoke the skill by name or use /entradex
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.16
No changes detected in this version. - Version 0.1.16 released with no updates to documentation or code files.
v0.1.15
- Metadata updated: the "metadata" section now uses the "openclaw" key instead of "entradex". - No changes to commands, usage, or documentation content.
v0.1.14
- Removed references to the secondary CLI binary ("entradex-cli") – only "entradex" is now required. - Added "primaryEnv: DNSE_API_KEY" metadata. - Simplified OTP/trading-token instructions and removed extended user-OTP policy details from guidance. - Clarified and shortened the Security & Safety section. - Dropped explicit step-by-step warnings about manual OTP/passcode entry. - Cleaned up the "Common Workflow" and made flow descriptions more concise.
v0.1.13
- Updated security section: clarified that real trade execution requires explicit user OTP/passcode entry and that no OTP should be reused, assumed, or fabricated. - Added new OTP policy and workflow guidance, specifying manual user steps for SmartOTP and email OTP flows. - Revised sample commands and workflow to require explicit user interaction for creating trading tokens. - Emphasized that agents must require explicit user confirmation and user-entered OTP/passcode before executing real trades.
v0.1.12
- Trade command parameters and validation rules are now fully documented, including enum values for market type, side, and order type. - Detailed price and quantity validation rules are added for order placement, reflecting DNSE market constraints. - Command usage examples have been updated for consistency with new enum requirements. - User intent normalization and error-handling rules for enum parameters are specified.
v0.1.11
- Added entradex-cli to required bins in metadata for improved compatibility. - Updated install metadata section to clarify kind and package info. - Added a homepage link to the EntradeX CLI npm package in metadata.
v0.1.10
- Updated SKILL.md metadata to explicitly declare required environment variables (DNSE_API_KEY, DNSE_API_SECRET). - Reformatted metadata section for improved clarity and structure. - No changes to functionality or usage—documentation only.
v0.1.9
- Updated SKILL.md to simplify description and clarify intended workflows and scenarios of use. - Revised the metadata section for clearer structure and accuracy. - Installation instructions now explicitly add the npm global install command. - Removed some redundant warnings to streamline security and safety guidance. - No changes to CLI commands or functionality.
v0.1.8
Version 0.1.8 of entradex - No file changes detected in this release. - No new features, fixes, or updates noted.
v0.1.7
- Added metadata fields: homepage, license, and author to SKILL.md. - Added explicit security and safety instructions, including how to verify the npm package and warnings about real trading. - Linked to the official GitHub repository and npm package for further inspection. - Clarified credential and usage recommendations. - Minor formatting and structure improvements for better readability.
v0.1.6
- Updated SKILL.md metadata format for consistency; moved "requires" and "install" sections out from under the custom "entradex" key. - No commands or usage changed; documentation now uses a standardized metadata layout.
v0.1.5
- Metadata structure simplified: moved requirements and install instructions under a single "entradex" field. - Removed duplicate "requires" section at the top level in favor of a more concise format. - Dropped detailed security/npm package review instructions for brevity. - No changes to commands, usage, or workflow documentation.
v0.1.4
- Added required_binaries, required_env_vars, and required_config_paths fields to metadata section in SKILL.md for improved requirements clarity. - No changes to core commands, usage instructions, or workflow.
v0.1.3
- Updated SKILL.md with detailed npm security and package verification instructions for safer global installation. - Added advice on inspecting package metadata and contents before install. - Noted interactive credential setup as recommended, and warned about exposing secrets in shell history with CLI arguments. - No changes to commands, CLI functionality, or usage examples.
v0.1.2
- Expanded metadata to specify required environment variables and config files. - Updated install instructions and security notes for handling API credentials. - Clarified usage of local workspace commands versus global installation. - No changes to available CLI commands or workflow. - Documentation improvements and formatting adjustments for clarity.
v0.1.1
No changes detected in this version. - No file or documentation updates were made in version 0.1.1.
v0.1.0
Initial release of entradex CLI integration. - Provides CLI commands to interact with the DNSE EntradeX API. - Supports authentication, account management, order placement, trading, and market data operations. - Credentials can be set via config file, environment variables, or command options. - Includes workflow for typical trading actions: configure, authenticate, and place orders.
Metadata
Slug entradex
Version 0.1.16
License
All-time Installs 0
Active Installs 0
Total Versions 17
Frequently Asked Questions

What is EntradeX?

Use the EntradeX CLI for DNSE workflows. Use when (1) setting DNSE API credentials via env vars or config file, (2) reading account, market, and order data,... It is an AI Agent Skill for Claude Code / OpenClaw, with 535 downloads so far.

How do I install EntradeX?

Run "/install entradex" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is EntradeX free?

Yes, EntradeX is completely free (open-source). You can download, install and use it at no cost.

Which platforms does EntradeX support?

EntradeX is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created EntradeX?

It is built and maintained by Hieu Tran (@hieuhani); the current version is v0.1.16.

💬 Comments