QStrader - AI Trading Assistant

AI Trading Assistant for quantumstocks.ru. Automated hedge fund with market analysis, risk management, and trade execution via n8n MCP. Use when analyzing ma...

This skill appears to implement what it claims (market analysis, risk checks, and mcporter-based trading), but there are important mismatches and operational risks you should address before installing: 1) Metadata mismatch: The skill DOES expect and instruct you to populate a .env with N8N_MCP_URL, QDRANT and LightRAG credentials, and an OpenRouter key, yet the registry lists no required env vars. Don’t assume the registry has enumerated needed secrets — inspect and populate .env yourself. 2) Broker write ability: The skill can call Place_Order and other write endpoints via mcporter. SKILL.md asks for human confirmation, but the code does not technically enforce an interactive confirmation step. If you allow autonomous agent actions, an agent could place live orders. Limit agent autonomy or require an explicit, auditable manual confirmation step before any write call. 3) mcporter config and scope: The scripts auto-detect and use existing mcporter config files (~/.openclaw/workspace/config/mcporter.json, ~/.mcporter/mcporter.json). Before running, inspect those files to ensure they reference only broker/MCP endpoints you control; otherwise the skill could use pre-existing credentials unintentionally. 4) Run in a safe environment: Test thoroughly in a sandbox or paper-trading account (n8n MCP test/demo) before connecting to live brokers. Verify risk_manager behavior (it returns non-zero on rejection) and that your operational process prevents accidental live orders. 5) Review .env.example and sources: Fill only the minimal credentials required, rotate keys used for testing, and avoid putting high-privilege production keys into the skill until tested. Consider restricting OPENROUTER/QDRANT keys to limited-scope/test projects. 6) Operational checks: If you intend to use this skill, update the registry metadata to list required env vars and required binaries (mcporter, python3). Add or demand a programmatic confirmation step (or disable autonomous invocation) before write endpoints are called. If you want, I can produce a checklist you can run before enabling the skill or suggest a minimal .env and a safe confirmation wrapper to enforce manual approval.

Type: OpenClaw Skill Name: qstrader Version: 1.0.0 The QStrader skill bundle is a comprehensive AI trading assistant designed to interface with an n8n-based Model Context Protocol (MCP) server. The code (Python and Bash) and documentation (SKILL.md, README.md) are consistently aligned with the stated purpose of market analysis, risk management, and trade execution. The skill includes explicit safety mechanisms, such as a dedicated risk manager script (risk_manager.py) that enforces stop-loss/take-profit orders, margin limits, and daily loss caps. It also instructs the AI agent to always seek user confirmation before placing orders. No evidence of data exfiltration, unauthorized execution, or malicious prompt injection was found; the scripts primarily use the 'mcporter' CLI to interact with the user's own configured MCP endpoints.