← Back to Skills Marketplace
canonxu

my_stock_tradeagents_rebuild_skill

by canonxu · GitHub ↗ · v1.0.3 · MIT-0
cross-platform ⚠ suspicious
164
Downloads
0
Stars
2
Active Installs
4
Versions
Install in OpenClaw
/install my-stock-tradeagents-rebuild-skill
Description
当且仅当用户明确提出“重新构建tradeagents”或类似高度相关指令时触发。主要功能为在 ~/TradingAgents 目录下重新创建并激活 Python 虚拟环境,安装包及依赖,最后总结修改并推送到远程仓库。
Usage Guidance
Before installing or invoking this skill: (1) Note the inconsistencies in packaging (skill.json vs SKILL.md and owner/slug/version mismatches) — ask the publisher to clarify. (2) Understand the skill will run rm -rf venv, build/install packages, then git add/commit and push everything in ~/TradingAgents without further confirmation — audit the repo for secrets and make backups/clones first. (3) Ensure python3.13 and git are present and your Git authentication is configured (or expect pushes to fail/occur using existing credentials). (4) If you want safer behavior, request the skill be changed to: prompt for confirmation before committing/pushing, show a git diff/status, and declare required binaries and credential usage explicitly. If any of the inconsistencies or automatic push behavior is unacceptable, do not install or run this skill.
Capability Analysis
Type: OpenClaw Skill Name: my-stock-tradeagents-rebuild-skill Version: 1.0.3 The skill automates a standard development workflow for a specific project in `~/TradingAgents`, including recreating a Python virtual environment and pushing local changes to a Git repository. While the use of `git add .` followed by `git push` in `SKILL.md` is a broad action that could inadvertently upload sensitive files if they exist in that directory, the instructions are transparent and strictly aligned with the stated purpose of rebuilding the environment. No evidence of intentional data exfiltration, obfuscation, or malicious execution was found.
Capability Assessment
Purpose & Capability
The SKILL.md behavior (cd ~/TradingAgents, rm -rf venv, python3.13 -m venv, pip install ., git add/commit/push) is consistent with the described purpose, but metadata and declarations are inconsistent: skill.json's description references conda while SKILL.md uses venv, skill.json slug/author differ from registry owner, version numbers mismatch, and the skill declares no required binaries even though it relies on python3.13, git, and shell utilities. These mismatches are unexplained and reduce trust.
Instruction Scope
Instructions perform destructive local actions (rm -rf venv) and repository-wide operations (git add .; git commit; create branch; git push) automatically with no safety checks, diffs, or user confirmation beyond the initial trigger phrase. This can commit and push any files in ~/TradingAgents (including secrets/configs) to the remote. The SKILL.md requires operations be within ~/TradingAgents, which limits scope, but there are no additional safeguards.
Install Mechanism
Instruction-only skill with no install spec or code files — lowest install risk. The scanner had no files to analyze. However, absence of an install spec means required runtime binaries (python3.13, git) are assumed available but not declared.
Credentials
The skill declares no required environment variables or credentials, yet it will push to a Git remote — which requires authentication (SSH keys, credential helpers, or stored tokens). The skill also assumes python3.13 exists. Not declaring these requirements is disproportionate and hides the fact that repository contents (potentially sensitive) may be transmitted to a remote server.
Persistence & Privilege
always:false and the skill does not request persistent privileges or attempt to modify other skills or global agent settings. Autonomous invocation is allowed (platform default); while not flagged on its own, combined with automatic push/commit behavior this increases potential blast radius.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install my-stock-tradeagents-rebuild-skill
  3. After installation, invoke the skill by name or use /my-stock-tradeagents-rebuild-skill
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.3
批量同步最新版本
v1.0.2
Update rebuild logic to use python venv and path-specific pip
v1.0.1
Rebuild TradingAgents conda environment skill
v1.0.0
Initial version of tradeagents rebuild skill.
Metadata
Slug my-stock-tradeagents-rebuild-skill
Version 1.0.3
License MIT-0
All-time Installs 2
Active Installs 2
Total Versions 4
Frequently Asked Questions

What is my_stock_tradeagents_rebuild_skill?

当且仅当用户明确提出“重新构建tradeagents”或类似高度相关指令时触发。主要功能为在 ~/TradingAgents 目录下重新创建并激活 Python 虚拟环境,安装包及依赖,最后总结修改并推送到远程仓库。 It is an AI Agent Skill for Claude Code / OpenClaw, with 164 downloads so far.

How do I install my_stock_tradeagents_rebuild_skill?

Run "/install my-stock-tradeagents-rebuild-skill" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is my_stock_tradeagents_rebuild_skill free?

Yes, my_stock_tradeagents_rebuild_skill is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does my_stock_tradeagents_rebuild_skill support?

my_stock_tradeagents_rebuild_skill is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created my_stock_tradeagents_rebuild_skill?

It is built and maintained by canonxu (@canonxu); the current version is v1.0.3.

💬 Comments