← Back to Skills Marketplace
armax

Congress Trades Tracker

by Arm4x · GitHub ↗ · v1.1.4
cross-platform ⚠ suspicious
753
Downloads
0
Stars
0
Active Installs
7
Versions
Install in OpenClaw
/install congress-trades
Description
Track US congress member and politician stock trades in real-time using the Quiver Quant API. Syncs trades to a local SQLite database, detects new significan...
README (SKILL.md)

Congress Trades Tracker

Monitor US congressional stock trades via Quiver Quant API, store in a local SQLite database, and alert on new significant trades. Requires Python requests library and a Quiver Quant API key.

Requirements

Environment Variables

Variable Required Default Description
QUIVER_API_KEY Yes Quiver Quant API token
CONGRESS_DB_PATH No data/congress_trades.db SQLite database path
MIN_TRADE_AMOUNT No 15001 Minimum trade amount to trigger alerts

Set these in your shell profile, .env file, or cron environment. Never hard-code API keys in the script.

Setup

1. Install Python dependency

pip install requests

2. Set your API key

export QUIVER_API_KEY="your-api-key-here"

3. Schedule with user cron (no sudo needed)

Add your env vars to ~/.profile or a .env file sourced by your shell, then add the cron entry:

crontab -e
# Add this line (uses env vars from your profile):
* * * * * . "$HOME/.profile" && /usr/bin/python3 /path/to/scripts/scraper.py >> /path/to/logs/scraper.log 2>&1

Never inline API keys directly in crontab entries.

4. Set up OpenClaw alert pickup

Add to your HEARTBEAT.md:

## Check for congress trade alerts
- Read `congress_trades/data/pending_congress_alert.txt` — if it has content, send the alert to the user, then delete the file.

Or create an OpenClaw cron job (every 5 min) to check and forward alerts.

How It Works

  1. Scraper runs every minute, fetches latest 200 trades from api.quiverquant.com
  2. Inserts into local SQLite with unique trade_key deduplication
  3. First run initializes DB and reports newest trade
  4. Subsequent runs detect new trades, filter to buys/sells above threshold
  5. Writes formatted alert to data/pending_congress_alert.txt for OpenClaw pickup
  6. Keeps last 50 alerts in data/new_trades.json

Network and Data

  • Only outbound connection: api.quiverquant.com (Quiver Quant API)
  • Storage: local SQLite file + JSON alert files in data/
  • No external endpoints besides the Quiver API
  • Restrict file permissions on data directory (chmod 700 data/)

Alert Format

🏛️ 3 new congress trade(s) detected:

🟢 PURCHASE: Nancy Pelosi (D) [Rep]
   $NVDA — $1,000,001 - $5,000,000
   Trade: 2026-02-10 | Reported: 2026-02-14

🔴 SALE: Dan Crenshaw (R) [Rep]
   $MSFT — $15,001 - $50,000
   Trade: 2026-02-09 | Reported: 2026-02-14

Customization

  • MIN_TRADE_AMOUNT: raise/lower via env var to change alert threshold
  • Fetch limit: change limit=200 in fetch_trades() for broader sweeps
  • Cron frequency: reduce to every 5 or 15 minutes if you prefer less polling
Usage Guidance
This skill appears to do what it says: poll Quiver Quant, store trades locally, and write alert files for OpenClaw pickup. Before installing: 1) Provide a Quiver API key (QUIVER_API_KEY) via environment — the registry metadata omitted this but both SKILL.md and the script require it. 2) Confirm where the skill will be placed so the created data/ and logs/ directories are acceptable and set restrictive permissions (chmod 700 data/). 3) Ensure the agent environment has Python 3.10+ and the requests package. 4) Review cron scheduling and retention (it writes new_trades.json and a sqlite DB) to avoid unbounded growth. 5) Treat the QUIVER_API_KEY as sensitive (don’t hard-code it; store in a secure secrets store). If you need stronger assurance, ask the publisher to correct the registry metadata to declare QUIVER_API_KEY and provide an origin/homepage for trust verification.
Capability Analysis
Type: OpenClaw Skill Name: congress-trades Version: 1.1.4 The skill is classified as suspicious due to a prompt injection vulnerability against the OpenClaw agent. The `scripts/scraper.py` script fetches data from `api.quiverquant.com` and writes formatted alerts, including potentially unsanitized external data, to `data/pending_congress_alert.txt`. The `SKILL.md` explicitly instructs the OpenClaw agent to read this file and send its content as an alert, creating a vector for prompt injection if the external API data were to contain malicious agent commands.
Capability Assessment
Purpose & Capability
The name/description (track congressional trades via Quiver Quant) aligns with the included script and instructions. However, the registry metadata lists no required environment variables while SKILL.md and scripts/scraper.py both require QUIVER_API_KEY — a metadata inconsistency that should be corrected.
Instruction Scope
SKILL.md and the script stay within scope: they call only the Quiver API, write a local SQLite DB and alert files under the skill's data directory, and instruct cron/OpenClaw pickup. There are no instructions to read unrelated host files or to send data to third-party endpoints beyond api.quiverquant.com.
Install Mechanism
No install spec or external downloads; the skill is instruction-only with a simple Python script that depends on the standard requests package — low install risk.
Credentials
The script legitimately requires a single API key (QUIVER_API_KEY) and optional local-path env vars (CONGRESS_DB_PATH, MIN_TRADE_AMOUNT). This is proportionate to its function, but the registry metadata failing to list QUIVER_API_KEY is an incoherence to surface.
Persistence & Privilege
The skill does not request always:true and does not modify other skills or global agent configs. It writes only to its own data/logs paths under the skill directory; autonomous model invocation is allowed but is the platform default.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install congress-trades
  3. After installation, invoke the skill by name or use /congress-trades
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.1.4
Fix: removed misleading zero external dependencies claim. Description now accurately states requests library and QUIVER_API_KEY are required.
v1.1.3
Scraper now exits with error if QUIVER_API_KEY env var is not set. No silent fallback.
v1.1.2
Improve discoverability: add politician, senator, representative keywords to description.
v1.1.1
Fix: cron example no longer inlines API key. Source from profile/.env instead.
v1.1.0
Declare QUIVER_API_KEY as required env var. Use user cron instead of system cron. Add network/data transparency section.
v1.0.1
Fix: description now correctly references SQLite instead of MongoDB. Added QUIVER_API_KEY env var requirement to metadata.
v1.0.0
Initial release of congress-trades skill: - Monitors US Congress stock trades in real-time via Quiver Quant API. - Automatically syncs trades to SQLite and tracks unique trades. - Detects and alerts on new trades above a customizable $15,000 threshold. - Sends trade alerts via OpenClaw message system using a file-based handoff. - Keeps a local history of the latest 50 trade alerts for review. - Fully configurable through environment variables or script edits.
Metadata
Slug congress-trades
Version 1.1.4
License
All-time Installs 1
Active Installs 0
Total Versions 7
Frequently Asked Questions

What is Congress Trades Tracker?

Track US congress member and politician stock trades in real-time using the Quiver Quant API. Syncs trades to a local SQLite database, detects new significan... It is an AI Agent Skill for Claude Code / OpenClaw, with 753 downloads so far.

How do I install Congress Trades Tracker?

Run "/install congress-trades" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Congress Trades Tracker free?

Yes, Congress Trades Tracker is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Congress Trades Tracker support?

Congress Trades Tracker is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Congress Trades Tracker?

It is built and maintained by Arm4x (@armax); the current version is v1.1.4.

💬 Comments