← Back to Skills Marketplace
655
Downloads
0
Stars
0
Active Installs
6
Versions
Install in OpenClaw
/install tiger-trade
Description
Execute US and HK stock trades via Tiger Brokers API. Use when user wants to buy or sell stocks, manage investment portfolio, place orders for US ETFs or HK...
Usage Guidance
This skill appears to implement Tiger Brokers trading calls, but it has multiple inconsistencies and missing declarations. Before installing or using it: 1) Verify the skill's source and author (no homepage/source provided). 2) Do not place your broker private key into an unencrypted ~/.tiger-config.json unless you accept the risk — prefer a secure vault or environment-scoped secret. 3) Confirm and install dependencies (Python and tigeropen) in a controlled environment; the skill metadata does not declare them. 4) Inspect and test the code in a sandbox (look for any network calls beyond Tiger's endpoints) and correct the SKILL.md bugs (filename mismatch and Python ~ expansion). 5) If you plan to allow autonomous agent invocation, only do so after ensuring the skill cannot read other files or exfiltrate secrets. These issues are likely sloppy engineering rather than malicious intent, but they raise enough doubt to warrant careful review and remediation before use.
Capability Analysis
Type: OpenClaw Skill
Name: tiger-trade
Version: 1.0.5
The skill provides high-risk financial trading capabilities via the Tiger Brokers API. While it appears to be a legitimate tool, the SKILL.md file contains a 'Quick Trade' Python example with hardcoded parameters (stock '02800', quantity '10000', and 'sandbox = False') that could lead an AI agent to execute a large, unintended live transaction (~268,000 HKD) if it follows the snippet literally. Additionally, the code contains a functional flaw where it attempts to open a file path using the tilde (~) character without proper shell expansion, and the setup instructions contain a typo (trailing space in the filename '~/.tiger-config.json ').
Capability Assessment
Purpose & Capability
The skill claims to execute trades via the Tiger Brokers API, and the SKILL.md shows code that uses the tigeropen client to place orders — this matches the stated purpose. However the package/dependency (tigeropen/Python runtime) and the required config file are not declared in the skill metadata/requirements, which is unexpected for a runtime that relies on that library and an on-disk private key.
Instruction Scope
Runtime instructions tell the agent to create and read a config file at ~/.tiger-config.json containing tiger_id/account/private_key_pk8 and to use it to sign API requests. That is within the trading purpose, but the SKILL.md has inconsistent filenames (top header says tiger-config.json, Setup says ~/.tiger-config.json) and uses open('~/.tiger-config.json') which does not expand ~ in Python — indicating sloppy/buggy instructions. The instructions require reading a sensitive private key from the user's home directory but do not instruct how to secure it or offer alternatives (env var, secure vault). There are no instructions to install or verify the tigeropen library, so an agent following the SKILL.md might fail or try to fetch/install packages on the fly.
Install Mechanism
This is an instruction-only skill (no install spec). That alone is low-risk, but the runtime code depends on the tigeropen Python package and a Python runtime; those requirements are not declared. Missing dependency declarations increase the chance an agent will attempt to install packages at runtime or run incorrect ad-hoc commands, which is a safety and coherence concern.
Credentials
No required env vars or config paths are declared in the registry metadata, yet the SKILL.md requires a user config file containing a private key and account id. Requesting a private key is reasonable for trading, but the skill does not justify why it uses an on-disk plain JSON private key, does not advise secure storage, and does not declare the config path in metadata. The lack of declared primary credential or config path is a mismatch.
Persistence & Privilege
The skill is not force-included (always: false) and is user-invocable; it does not request persistent privileges or system-wide configuration changes. No other persistence/privilege flags are set.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install tiger-trade - After installation, invoke the skill by name or use
/tiger-trade - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.5
- Updated documentation in SKILL.md for clarity and consistency.
- Generalized some example instructions and removed restrictive notes about Hong Kong stocks.
- No changes to code—documentation only.
v1.0.4
- Updated instructions for checking stock prices to include both HK and US stocks (e.g., AAPL).
- Clarified that stock codes can be replaced with any stock symbol in the price check section.
- Removed the HK stocks example table from documentation for simplicity.
- Minor formatting and wording improvements in the setup and usage sections.
v1.0.3
- Added meta information file (_meta.json) for the skill.
- No changes to functionality or documentation beyond metadata update.
v1.0.2
- Added instructions for checking HK stock prices using the Tiger Broker website.
- Included a reference table with popular HK stock codes and names.
- Updated the quick trade example to demonstrate placing HK stock orders.
- No changes to code APIs or configuration requirements.
v1.0.1
- Updated config file path instructions to use a standard home directory location (`~/.tiger-config.json`).
- Simplified the quick trade script instructions and made the symbol entry generic for easier adaptation.
- Refined the description for clarity and removed specific stock examples for general US ETFs and HK stocks.
- Removed references to uncommon symbols and examples to keep documentation focused and relevant.
v1.0.0
Tiger Trade 1.0.0 initial release:
- Execute US and HK stock trades via Tiger Brokers API.
- Supports buying/selling stocks, managing portfolios, placing ETF/HK stock orders, and checking account balance.
- Requires a configuration file with necessary Tiger Brokers account credentials.
- Provides example code for placing trades and lists common stock/ETF symbols.
- Documentation includes available order types and trade actions.
Metadata
Frequently Asked Questions
What is Tiger Trade?
Execute US and HK stock trades via Tiger Brokers API. Use when user wants to buy or sell stocks, manage investment portfolio, place orders for US ETFs or HK... It is an AI Agent Skill for Claude Code / OpenClaw, with 655 downloads so far.
How do I install Tiger Trade?
Run "/install tiger-trade" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Tiger Trade free?
Yes, Tiger Trade is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Tiger Trade support?
Tiger Trade is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Tiger Trade?
It is built and maintained by esanle (@esanle); the current version is v1.0.5.
More Skills