Questrade

Execute and monitor stock trades for openclaw.ai workflows using Questrade's browser platform with Yahoo Finance cross-checks. Use when Codex is asked to pre...

This skill appears coherent and low-risk for its stated purpose, but take these precautions before installing or running it: 1) Inspect the bundled scripts yourself (they are included) and confirm no modifications; 2) Run in paper/test mode first and verify outputs with non-sensitive sample data; 3) Be aware market_snapshot.py makes outbound requests to Yahoo Finance — if you need an air-gapped run, avoid network access; 4) Never paste broker credentials, MFA codes, or session cookies into chat or script arguments; the tool will include raw account IDs only if you explicitly pass the sensitive flags; 5) Prefer running the scripts locally (not in an unknown remote runtime) and keep final submission manual in the Questrade Web UI as the playbook requires; 6) Consider the publisher/trust: source/homepage is unknown, so if you plan persistent use, prefer a vetted upstream or maintain a local audited copy.

Type: OpenClaw Skill Name: openclaw-questrade Version: 1.0.0 The OpenClaw Questrade skill bundle is designed with a strong emphasis on security, privacy, and human oversight. The `SKILL.md` and `references/*.md` files contain explicit instructions for the AI agent to enforce privacy rules (e.g., never sharing credentials, masking identifiers, local-only storage), require explicit user authorization, and confirm manual execution for high-impact actions. The Python scripts (`scripts/build_trade_checklist.py` and `scripts/market_snapshot.py`) implement these safety measures through robust input validation, mandatory safety checks, and identifier masking. `market_snapshot.py` makes legitimate network calls to Yahoo Finance for market data, which is aligned with its stated purpose. There is no evidence of intentional harmful behavior, data exfiltration, unauthorized execution, or persistence mechanisms.