← Back to Skills Marketplace
mofesto

Fubon Cli

by Mofesto · GitHub ↗ · v0.1.1
cross-platform ⚠ suspicious
291
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install fubon-cli
Description
AI-agent skill for Taiwan stock/futures/options operations via fubon-cli. Use this skill whenever the user asks about Fubon Neo login, order placement, accou...
README (SKILL.md)

fubon-cli Skill

Use this skill to execute fubon commands safely and return parseable results for downstream automation.

What This Skill Does

  • Executes fubon-cli command groups end to end.
  • Keeps command usage aligned with actual CLI behavior.
  • Returns standardized JSON output and error handling guidance.
  • Supports order lifecycle workflows: login -> query -> place order -> verify -> adjust/cancel.

When To Use

Use this skill if the user asks for any of these intents:

  • Login/logout/session status for Fubon Neo.
  • Place or manage stock/futures/options orders.
  • Query inventory, unrealized PnL, settlement, balances, margin quota.
  • Read market quotes, candles, trade details, movers, actives, snapshots, history.
  • Subscribe to realtime market or callback streams.
  • Manage conditional orders.
  • Use natural language to produce trading commands (fubon ask, fubon chat).

Preconditions

  1. Install platform wheel for fubon_neo.
  2. Install fubon-cli.
  3. Ensure certificate files and account credentials are available.

Example:

pip install ./wheels/fubon_neo-2.2.8-cp37-abi3-win_amd64.whl
pip install fubon-cli

Core Workflow

  1. Authenticate first.
  2. Run requested query or order action.
  3. Inspect success and error keys.
  4. If placing an order, run follow-up query to confirm state.
fubon login --id \x3CID> --password \x3CPW> --cert-path \x3CPATH> --cert-password \x3CCERT_PW>
fubon login --id \x3CID> --api-key \x3CAPI_KEY>  --cert-path \x3CPATH> --cert-password \x3CCERT_PW>
fubon market quote 2330
fubon stock buy 2330 1000 --price 580
fubon stock orders

Command Map

Auth

fubon login --id \x3CID> --password \x3CPW> --cert-path \x3CPATH> [--cert-password \x3CPW>]
fubon login status
fubon login logout

Command Surface

The Command Surface below lists the primary CLI entrypoints and example usages. These map 1:1 to the fubon-cli commands and are safe to invoke from automation when preconditions are met.

See the examples in the Command Map section for concrete invocations.

Stock

fubon stock buy \x3CSYMBOL> \x3CQTY> --price \x3CPRICE>
fubon stock sell \x3CSYMBOL> \x3CQTY> --price \x3CPRICE>
fubon stock orders
fubon stock cancel \x3CORDER_NO>
fubon stock modify-price \x3CORDER_NO> \x3CNEW_PRICE>
fubon stock modify-quantity \x3CORDER_NO> \x3CNEW_QTY>

Account

fubon account inventory
fubon account unrealized
fubon account settlement
fubon account margin-quota \x3CSYMBOL>

Market

fubon market quote \x3CSYMBOL>
fubon market ticker \x3CSYMBOL>
fubon market candles \x3CSYMBOL> --timeframe 5
fubon market trades \x3CSYMBOL> --limit 50
fubon market snapshot TSE
fubon market movers TSE --direction up
fubon market actives TSE --trade volume
fubon market history \x3CSYMBOL> --from 2024-01-01 --to 2024-06-30

Realtime

fubon realtime subscribe \x3CSYMBOL>
fubon realtime callbacks

Futures and Options

fubon futopt buy TXF202406 1 --price 20000
fubon futopt sell TXF202406 1 --price 20100
fubon futopt orders

Conditional Orders

fubon condition create --payload '{"symbol":"2330","trigger":{}}'
fubon condition list
fubon condition cancel \x3CCONDITION_ID>

AI

fubon ask "台積電現在的價格是多少?"
fubon chat
fubon config set openai-key \x3COPENAI_KEY>
fubon config show

Output Contract

Non-streaming commands:

{
  "success": true,
  "data": {}
}

Failure example:

{
  "success": false,
  "error": "Error message"
}

Streaming commands output JSONL (one JSON object per line).

Execution Rules

  1. Never assume login state; check status or handle not-logged-in errors.
  2. For orders, always confirm with fubon stock orders or equivalent query command.
  3. For retriable failures (network/transient), retry conservatively once.
  4. For parameter or auth failures, stop and surface exact error text.

Safety Boundaries

  • Do not expose raw credentials in logs or chat output.
  • Encourage verification of symbol, quantity, price, and account index before order placement.
  • Prefer non-production or low-risk validation paths for first-time automation.

Release Binding

This skill is version-bound with fubon-cli.

  • scripts/validate_skill_doc.py validates coverage.
  • scripts/build_skill_bundle.py builds skill artifact.
  • scripts/publish_skill.py publishes to clawhub endpoint.
  • CI/CD should publish skill after package release to keep tool and skill synchronized.

Version Binding

This skill's version must be kept in sync with the fubon-cli package version. The CI/CD pipeline is configured to build and publish the skill bundle immediately after a successful package release so the skill metadata (skill.manifest.json) and SKILL.md match the released package.

  • Use scripts/build_skill_bundle.py to create dist/skill artifacts tied to the current git tag or package version.
  • Use scripts/publish_skill.py (requires CLAWHUB_API_TOKEN) to publish the bundle to the skill registry.
Usage Guidance
Before installing or enabling this skill: (1) understand it will run the fubon-cli on your machine and requires your trading account credentials, certificate files, and cert passwords — do not supply these unless you fully trust both the fubon-cli binary and this skill's runtime environment. (2) Avoid passing secrets on the command line (they can appear in process lists and shell history); prefer secure methods (secured files with restricted permissions, prompting, or environment variables handled by the user) and audit how fubon-cli stores any keys (e.g., fubon config). (3) Verify the origin and integrity of the fubon-cli package and any wheels before pip installing; prefer official releases from a known repository. (4) The SKILL.md references CI/publish scripts that require a CLAWHUB_API_TOKEN — that is about publishing the skill and not needed at runtime; do not expose such platform tokens to the skill runtime. (5) Consider enabling this skill only when needed and review logs/output to ensure no secrets are emitted. Additional information that would reduce my concern: explicit secure-auth guidance in SKILL.md (e.g., how to provide credentials without CLI args), declared required env vars or credential interfaces in the manifest, or a trusted install/source URL for fubon-cli.
Capability Analysis
Type: OpenClaw Skill Name: fubon-cli Version: 0.1.1 The skill is designed to interact with the `fubon-cli` for Taiwan stock/futures/options operations, which inherently involves handling sensitive financial data and credentials. However, the `SKILL.md` explicitly includes safety instructions for the AI agent, such as 'Do not expose raw credentials in logs or chat output' and encourages verification before order placement. There is no evidence of prompt injection with malicious intent, data exfiltration, unauthorized remote execution, or persistence mechanisms within the provided files. The instructions are aligned with the stated purpose of a financial trading CLI integration.
Capability Assessment
Purpose & Capability
The name/description align with the SKILL.md: the document repeatedly instructs how to run fubon-cli to login, place orders, query accounts, and subscribe to realtime data. Requiring certificates, account IDs/passwords, and API keys is coherent with the trading automation purpose.
Instruction Scope
The instructions tell the agent to run fubon CLI commands that require credentials and certificate files and provide examples that pass passwords, cert passwords, and API keys on the command line. Passing secrets as CLI arguments can leak to process lists, shell history, or logs. The SKILL.md's guidance to "Do not expose raw credentials in logs or chat output" is present but not prescriptive (no secure auth patterns such as using prompting, stdin, restricted files, or environment variables are mandated). The doc also contains CI/publish scripting references (e.g., scripts/publish_skill.py requiring CLAWHUB_API_TOKEN) that are about publishing the skill and not about runtime behavior — this mixes operational/publishing concerns into the runtime instructions.
Install Mechanism
This is an instruction-only skill with no install spec and no code files, so it does not itself install binaries. That is the lowest install risk. The SKILL.md suggests installing packages (pip install fubon-cli or a local wheel) but those are user actions and are noted clearly as preconditions.
Credentials
The skill will require sensitive credentials (account ID/password, cert files and cert passwords, API keys), but the registry metadata declares no required env vars or primary credential. The SKILL.md examples demonstrate passing secrets on the command line and includes a command that can store an OpenAI key in the fubon-cli config. There is a mismatch between the skill's sensitive needs and the manifest's lack of declared credential requirements and explicit secure handling.
Persistence & Privilege
The skill does not request always: true and does not claim to modify other skills or global agent settings. It simply instructs use of the fubon CLI and mentions keeping the skill version aligned with the fubon-cli package; this is operational, not a privilege escalation.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install fubon-cli
  3. After installation, invoke the skill by name or use /fubon-cli
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.1
- Added explicit example of API key login: `fubon login --id <ID> --api-key <API_KEY> --cert-path <PATH> --cert-password <CERT_PW>`. - No other functional or documentation changes.
v0.1.0
- Initial release of the fubon-cli skill for Taiwan stock/futures/options trading operations. - Supports authentication, order management, account queries, market data retrieval, and conditional orders via safe command-line automation. - Provides standardized JSON output for easy integration and error handling. - Natural language trading commands are mapped to CLI actions using `fubon ask` and `fubon chat`. - Ensures workflow safety: explicit login required, confirmation of order actions, and secure credential handling. - Designed to remain version-synced with the `fubon-cli` package for reliable CI/CD deployment.
Metadata
Slug fubon-cli
Version 0.1.1
License
All-time Installs 0
Active Installs 0
Total Versions 2
Frequently Asked Questions

What is Fubon Cli?

AI-agent skill for Taiwan stock/futures/options operations via fubon-cli. Use this skill whenever the user asks about Fubon Neo login, order placement, accou... It is an AI Agent Skill for Claude Code / OpenClaw, with 291 downloads so far.

How do I install Fubon Cli?

Run "/install fubon-cli" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Fubon Cli free?

Yes, Fubon Cli is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Fubon Cli support?

Fubon Cli is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Fubon Cli?

It is built and maintained by Mofesto (@mofesto); the current version is v0.1.1.

💬 Comments