Trading212 API

This skill should be used when the user asks to "connect to Trading 212", "authenticate Trading 212 API", "place a trade", "buy stock", "sell shares", "place market order",, "place pending order", "place limit order", "cancel order", "check my balance", "view account summary", "get positions", "view portfolio", "check P&L", "find ticker symbol", "search instruments", "check trading hours", "view dividends", "get order history", "export transactions", "generate CSV report", or needs guidance on Trading 212 API authentication, order placement, position monitoring, account information, instrument lookup, or historical data retrieval.

This skill appears to be a genuine Trading 212 API helper based on its instructions, but it omits required credential declarations in the manifest and has no homepage or clear publisher provenance. Before installing or using it: (1) Prefer testing with DEMO credentials only — do not supply LIVE API keys until you're confident. (2) Ask the publisher to add explicit requires.env and primary credential metadata (so the platform can handle secrets securely). (3) Verify the skill's source (homepage or official publisher) — 'Trading 212' listed as author is not proof of authenticity. (4) If you must use it, supply the minimum necessary credentials and rotate keys afterward. (5) Watch for any requests to read unrelated environment variables or system files; if the agent asks for broader access than documented, stop and revoke keys. Providing no homepage and failing to declare required env vars is the primary reason this skill is flagged as suspicious; getting clear provenance and corrected metadata would raise confidence.

Type: OpenClaw Skill Name: trading212-api Version: 1.0.0 The skill is classified as suspicious due to its extensive handling of highly sensitive financial credentials and data. It explicitly instructs the agent to read API keys and secrets from environment variables, base64 encode them for authentication, and make network calls to perform financial transactions (buy/sell stocks). Most notably, the skill provides direct instructions to download comprehensive financial CSV reports, which contain sensitive user data, to the local filesystem (e.g., `trading212_report.csv`). While these actions are aligned with the stated purpose of interacting with the Trading 212 API, the inherent risks associated with managing financial credentials and storing sensitive financial reports locally, even if intended for the user, warrant a 'suspicious' classification rather than 'benign' given the potential for misuse or data exposure in an insecure environment. All network calls are directed to legitimate Trading 212 domains (e.g., `https://demo.trading212.com`, `https://live.trading212.com`, `trading212-reports.s3.amazonaws.com`).