XAUUSD

Institutional Desk-Level Fully Automated Trading OS for XAU/USD and XAG/USD. Event-driven, risk-first, multi-engine architecture that runs as a continuous analysis and execution pipeline inside OpenClaw's trader agent.

This package appears to be a real trading bot and requires live broker credentials to function (METAAPI_TOKEN / MT5 account info). Before installing: - Do not assume the registry metadata is accurate — manifest/README/code require sensitive environment variables. Treat that omission as a red flag. - Inspect broker-related files (broker/mt5-connector.js, broker/order-manager.js, broker/risk-guard.js) yourself or have a developer/auditor review them to verify they behave as claimed (no hidden remote endpoints, no credential exfiltration, proper error handling and halting logic). - Never paste real broker credentials into a package you haven't audited. Test with a simulated/demo account or with the system in Mode 1 (Advisory) where it uses simulated prices. - Do not run as root or on a production server. Run inside an isolated environment (VM/container) with least privilege and network controls. - If you plan to enable live execution, restrict the API credentials to minimum required scope, rotate secrets after testing, and monitor all orders closely. Consider having manual approval gates before enabling Mode 3 (Fully-Automated). - Because provenance is unknown (no homepage, unknown source owner), prefer an audit or source-of-truth repo copy before trusting it with real funds. If you want, I can: 1) highlight specific lines in mt5-connector/order-manager for risky behavior, or 2) summarize what env vars each file reads so you see where secrets are used.

Package: (xpi) Version: 1.0.0 Description: The package 'metals-desk-os' is an institutional-grade, fully automated trading operating system designed for XAU/USD and XAG/USD. It features an event-driven, risk-first architecture with multiple interconnected engines for price analysis, market structure, liquidity, macro-economic factors, bias determination, volatility, risk management, and trade execution. It integrates with MetaAPI for MT5 broker connectivity, enabling real-time market data acquisition and order placement (open, partial close, stop-loss management, trailing stops). The system supports various operational modes (Advisory, Semi-Automated, Fully-Automated, Risk-Off) and provides real-time alerts via Telegram and WhatsApp, along with a local WebSocket-based dashboard for monitoring and control. Operational data, such as trade logs, performance metrics, and bias memory, is persistently stored in local JSON files. Sensitive credentials are managed via environment variables. The code logic is entirely consistent with its stated purpose as a sophisticated trading bot, showing no signs of malicious activity, unauthorized data exfiltration, or resource abuse beyond its intended functionality.