← Back to Skills Marketplace
867
Downloads
0
Stars
2
Active Installs
11
Versions
Install in OpenClaw
/install xerolite
Description
Integrate OpenClaw with Xerolite - IBKR. Use when: querying Xerolite API, placing orders, searching contracts, fetching portfolio.
Usage Guidance
This skill appears to do exactly what it claims: send orders and queries to a Xerolite agent via HTTP using XEROLITE_AGENTIC_API_KEY. Before installing: 1) Only provide a dedicated API key with minimal permissions (prefer a paper/trading-limited key if available). 2) Verify and set XEROLITE_API_URL to your trusted Xerolite host (do not leave it pointing at an unknown public URL). 3) Be aware verbose logging will show partial API-key fragments (avoid enabling in shared logs). 4) Because the skill can place real trades and the agent may invoke it autonomously, consider disabling autonomous agent actions for trading or require explicit confirmations. 5) Test against a local/paper environment first to confirm behavior.
Capability Analysis
Type: OpenClaw Skill
Name: xerolite
Version: 0.1.4
The xerolite skill is a legitimate integration bridge between OpenClaw and the Xerolite/Interactive Brokers trading platform. The core logic in `scripts/xerolite.mjs` uses standard Node.js fetch calls to interact with a user-defined or local API endpoint for trading operations. It includes security-conscious practices such as masking API keys in verbose logs and lacks any indicators of data exfiltration, malicious execution, or prompt injection.
Capability Tags
Capability Assessment
Purpose & Capability
Name/description (Xerolite bridge to IBKR) matches the files and runtime behavior: the CLI sends POST requests to Xerolite agentic endpoints to place orders, search contracts, and get portfolio. Required binary (node) and required env var (XEROLITE_AGENTIC_API_KEY) are appropriate for this purpose.
Instruction Scope
SKILL.md and the CLI script limit actions to constructing JSON bodies and POSTing to the documented /api/agentic/* endpoints. The instructions don't read unrelated files or request other credentials. Network calls to the configured Xerolite base URL are expected for this functionality.
Install Mechanism
This is an instruction-only skill with an included Node CLI file; there is no install spec or remote download. Nothing is written to disk by an installer step, so install risk is low.
Credentials
Only one required secret (XEROLITE_AGENTIC_API_KEY) is requested, which is proportional. Minor notes: XEROLITE_API_URL can point to any host (defaults to http://localhost) — if set to a malicious URL the API key and requests could be sent elsewhere. Verbose logging masks the key but reveals first/last characters, which could leak in shared logs. Consider restricting the API key scope and carefully configuring XEROLITE_API_URL.
Persistence & Privilege
always:false (no force-install) and the skill is user-invocable. Model invocation is not disabled, so the agent could call the skill autonomously. This is expected for skills but increases impact because the skill can place trades; consider requiring explicit user confirmation or limiting agent autonomy for trading actions.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install xerolite - After installation, invoke the skill by name or use
/xerolite - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.4
- No user-facing changes in this version.
- SKILL.md updated with minor formatting and wording tweaks.
- No changes to code, commands, or functionality.
v0.1.3
**Added API key support and portfolio retrieval to Xerolite skill.**
- Now requires API key for all agentic (authenticated) endpoints (`XEROLITE_AGENTIC_API_KEY` or `--api-key`).
- Added new command to fetch portfolio/positions from Xerolite platform.
- Updated endpoints to use `/api/agentic/*` paths and send API key in the `X-Agentic-Api-Key` header.
- Removed legacy metadata file (`_meta.json`).
v0.1.2
xerolite 0.1.2
- Added _meta.json to define skill metadata.
- Updated SKILL.md: streamlined description, clarified setup and purpose, and made documentation more concise.
- No functional or interface changes to commands or API usage.
v0.1.1
- Improved description to clarify Xerolite is a TradingView-to-Interactive Brokers bridge and highlight its automation focus.
- Added direct links and more context for Xerolite, Interactive Brokers, and TradingView.
- Emphasized skill use cases (order placement, contract search) and integration with OpenClaw agents.
- No changes to features, code, commands, or API usage.
- Documentation is now clearer for new users and provides better onboarding context.
v0.1.0
Update Version to 0.1.0
v0.0.5
- Removed mention of processing Xerolite webhooks from the skill description.
- No functional or structural changes; documentation update only.
v0.0.4
- Removed webhook and transform functionality; skill now only supports placing orders and contract search via the Xerolite REST API.
- Deleted install/uninstall scripts, transform module, and webhook documentation.
- Refined documentation to reflect simplified feature set and updated package structure.
- Webhook event handling, notification formatting, and related troubleshooting details are no longer included.
v0.0.3
- BREAKING: Environment variable and endpoint changes; see below for details.
- Dropped requirement for XEROLITE_API_KEY and XEROLITE_API_URL environment variables.
- Now uses internal OpenClaw API endpoints (`/api/internal/agent/...`) instead of `/api/agent/...`.
- API key is no longer used; XEROLITE_API_URL is now optional (defaults to `http://localhost`).
- Metadata updated to remove unneeded environment variable requirements.
- Simplified requirements and environment setup; updated documentation to reflect changes.
v0.0.2
- Added OpenClaw-compatible metadata to SKILL.md, declaring required binaries and environment variables.
- No functional or structural changes to the code or scripts.
- The skill now clearly specifies its dependencies for improved interoperability with OpenClaw.
v0.0.1
Initial release of xerolite skill. Xerolite functions as a bridge software that routes TradingView signals to IBKR (Interactive Brokers) via webhook connectivity. Powered by Xeroflex, enabling signal-to-execution automation.
- Integrates OpenClaw with the Xerolite trading platform.
- Place orders and search contracts via Xerolite REST API.
- Receive and process Xerolite webhooks at /hooks/xerolite, transforming them into readable notifications.
- Installation and removal scripts included for easy setup.
- CLI and transform module provided to interact with orders, contracts, and webhook payloads.
v1.0.0
Initial release of Xerolite skill: Xerolite functions as a bridge software that routes TradingView signals to IBKR (Interactive Brokers) via webhook connectivity. Powered by Xeroflex, enabling signal-to-execution automation.
- Place orders and search contracts on Xerolite to IBKR (Interactive Brokers) TWS via easy command-line scripts.
- Receive and format Xerolite webhook notifications in OpenClaw.
- Simple install/uninstall scripts for setup and removal.
- Includes a transform module to format webhook payloads into readable notifications.
- Requires `XEROLITE_API_URL`, `XEROLITE_API_KEY` environment variables.
Metadata
Frequently Asked Questions
What is Xerolite?
Integrate OpenClaw with Xerolite - IBKR. Use when: querying Xerolite API, placing orders, searching contracts, fetching portfolio. It is an AI Agent Skill for Claude Code / OpenClaw, with 867 downloads so far.
How do I install Xerolite?
Run "/install xerolite" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Xerolite free?
Yes, Xerolite is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Xerolite support?
Xerolite is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Xerolite?
It is built and maintained by xeroflex (@xero-flex); the current version is v0.1.4.
More Skills