← Back to Skills Marketplace
Signal Generator
by
nititepfirm
· GitHub ↗
· v1.0.0
1852
Downloads
0
Stars
2
Active Installs
1
Versions
Install in OpenClaw
/install signal-generator
Description
Generate trading signals using BB Breakout or RSI Reversal strategies and send automated alerts to Discord, Telegram, or custom channels.
Usage Guidance
This skill produces trading signals locally and saves them to last_signal.json, but it does not itself send messages to Discord/Telegram despite the documentation saying it will. Before installing or running: 1) Do not assume it will post to external channels — inspect or add delivery code that uses secure storage of API tokens if you want that behavior. 2) Review any /root/quant-trading-bot repository on your system: the script inserts '/root/quant-trading-bot' onto sys.path and may import code from there, which could run with your environment's privileges or access secrets. 3) Run the skill in an isolated environment (non-root container or VM) and verify exactly what network calls it makes (it should only call Binance public endpoints via ccxt). 4) If you expect alerts to be sent automatically, either configure a safe delivery wrapper (with explicit, secure tokens) or confirm how OpenClaw will pick up last_signal.json and deliver alerts on your behalf. 5) If you are not comfortable with the host-path dependency or the missing send-logic, treat this package as incomplete or require the author to clarify and fix before use.
Capability Analysis
Type: OpenClaw Skill
Name: signal-generator
Version: 1.0.0
The skill is classified as suspicious primarily due to its explicit dependency on and import from the `/root/quant-trading-bot` directory, as seen in `run.sh`, `signal_generator.py`, `SKILL.md`, and `README.md`. While this path is plausibly a legitimate dependency within the OpenClaw ecosystem, relying on a privileged `/root` directory for Python environments and modules introduces a potential supply chain risk. If the `quant-trading-bot` component were compromised, or if the environment allowed unauthorized modification of files in `/root`, this skill could inadvertently execute malicious code. The skill also suggests setting up a cron job for persistence, which, while documented and aligned with its purpose, adds to the overall risk profile when combined with the privileged path dependency.
Capability Assessment
Purpose & Capability
SKILL.md and README claim the skill will 'send alerts to Discord/Telegram' and accept 'targets' in config, but signal_generator.py never implements network posting or uses the 'targets' configuration — it only writes last_signal.json. The code does implement data fetching and indicator calculations (ccxt/binance for public OHLCV), which fits the signal-generation purpose. However, the script also force-inserts '/root/quant-trading-bot' onto sys.path and run.sh/README reference a /root/quant-trading-bot venv — this external dependency on a host path is unexpected for a standalone skill and not justified by the documentation.
Instruction Scope
Runtime instructions tell the user to configure channel IDs and imply the skill will send alerts; the code only formats messages and saves signals to last_signal.json. SKILL.md's troubleshooting explicitly directs checking /root/quant-trading-bot, which means the runtime behavior can depend on files outside the skill directory. The instructions do not request tokens/credentials for Discord/Telegram, nor do they explain how those targets will be used, leaving ambiguity and possible scope creep (relying on external system integration).
Install Mechanism
There is no install spec (instruction-only), so nothing is downloaded by an installer. That's low risk. However, package.json and run.sh reference Python packages and a /root/quant-trading-bot venv, which suggests the author expects a specific host environment; that is unconventional but not directly malicious.
Credentials
The skill declares no required env vars or credentials, yet advertises sending alerts to Discord/Telegram. If users expect autonomous sending, tokens would normally be required — their absence indicates either (a) the skill expects OpenClaw to perform delivery from last_signal.json, or (b) the implementation is incomplete. Additionally, modifying sys.path to include '/root/quant-trading-bot' lets the skill import arbitrary code from that host path, which could expose or reuse credentials and is disproportionate for a simple signal generator.
Persistence & Privilege
The skill is not marked always:true and does not request system-wide configuration changes. It writes last_signal.json in its own directory and otherwise does not persist or alter other skills. Autonomous invocation is allowed (default) but not a special privilege here.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install signal-generator - After installation, invoke the skill by name or use
/signal-generator - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release - BB Breakout & RSI Reversal strategies
Metadata
Frequently Asked Questions
What is Signal Generator?
Generate trading signals using BB Breakout or RSI Reversal strategies and send automated alerts to Discord, Telegram, or custom channels. It is an AI Agent Skill for Claude Code / OpenClaw, with 1852 downloads so far.
How do I install Signal Generator?
Run "/install signal-generator" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Signal Generator free?
Yes, Signal Generator is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Signal Generator support?
Signal Generator is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Signal Generator?
It is built and maintained by nititepfirm (@nititepfirm); the current version is v1.0.0.
More Skills