← Back to Skills Marketplace
huili203

Trading Briefing

by huiLI203 · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
162
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install trading-briefing
Description
每日加密货币交易综合简报。当用户说"早报"、"简报"、"今天市场怎么样"、"交易情况"、"检查交易系统"、"系统状态"、"trading status"、"daily briefing"时触发。自动聚合:(1) BTC/ETH主流币价格 (2) 实盘机器人状态 (3) 持仓盈亏 (4) 系统健康 (5) 策略发现...
Usage Guidance
This skill's behavior mostly matches its description, but it implicitly reads files under /root/.openclaw/workspace/live_trading and backtest (state.json, trading.log, current_best.json, etc.). Those files may contain API keys, exchange credentials, or other sensitive trading data. SKILL.md also claims it will "reuse live_trading/config.json API keys" although the script does not explicitly load that file for ccxt — this mismatch is suspicious. Before installing, review the live_trading and backtest directories for secrets, consider running the skill in an isolated environment, and confirm whether you want a skill that reads other skills' state files. If you do proceed, audit any files the script will read (state.json, trading.log, config files) and ensure ccxt and network access are restricted as appropriate. If you want stricter guarantees, request the skill author to: (1) explicitly declare required config paths/credentials, (2) avoid hard-coded /root paths or make them configurable, and (3) document exactly what files are read and why.
Capability Analysis
Type: OpenClaw Skill Name: trading-briefing Version: 1.0.0 The skill bundle is a legitimate utility for aggregating cryptocurrency trading status and system health metrics. The script `scripts/briefing.py` uses standard system commands (df, free, pgrep) and the ccxt library to collect data, and it reads local state files from the expected workspace directory without any signs of data exfiltration or unauthorized execution.
Capability Assessment
Purpose & Capability
The code implements the stated briefing (market data, bot status, positions, system health, discovery). However SKILL.md claims it will "复用 live_trading/config.json 的 API 密钥" while the script's market fetch uses ccxt without loading that config; the skill also hard-codes workspace paths (/root/.openclaw/workspace) and accesses live_trading/backtest directories which are not declared in the manifest. Those implicit file accesses should be explicit.
Instruction Scope
SKILL.md instructs running a script at /root/.openclaw/workspace/skills/trading-briefing/scripts/briefing.py and suggests reusing live_trading/config.json. The script reads local files (live_trading/state.json, trading.log, backtest/current_best.json, discovery.log) and runs system commands (pgrep, tail, df, free). Reading other skill/workspace files and logs is outside what a simple 'daily briefing' description explicitly declares and could expose secrets or sensitive trading state.
Install Mechanism
No install spec — instruction-only with included Python script. Lowest install risk. Dependency on ccxt is mentioned but not installed by the skill; user/system must manage that.
Credentials
The skill declares no required env vars or credentials but (a) claims to reuse API keys from live_trading/config.json in SKILL.md, and (b) reads files in /root/.openclaw/workspace/live_trading and backtest. Those files may contain API keys, credentials, or sensitive trading data. Requiring/reading other skills' config files without declaring them is disproportionate and increases risk of secret exposure.
Persistence & Privilege
always is false and the skill does not modify other skills or global agent settings. It prints/saves reports to workspace if --save is used. The main concern is read access to other workspace dirs (see environment_proportionality), not persistent privileges.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install trading-briefing
  3. After installation, invoke the skill by name or use /trading-briefing
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
一键交易简报:市场行情、机器人状态、持仓盈亏、系统健康、策略发现
Metadata
Slug trading-briefing
Version 1.0.0
License MIT-0
All-time Installs 1
Active Installs 1
Total Versions 1
Frequently Asked Questions

What is Trading Briefing?

每日加密货币交易综合简报。当用户说"早报"、"简报"、"今天市场怎么样"、"交易情况"、"检查交易系统"、"系统状态"、"trading status"、"daily briefing"时触发。自动聚合:(1) BTC/ETH主流币价格 (2) 实盘机器人状态 (3) 持仓盈亏 (4) 系统健康 (5) 策略发现... It is an AI Agent Skill for Claude Code / OpenClaw, with 162 downloads so far.

How do I install Trading Briefing?

Run "/install trading-briefing" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Trading Briefing free?

Yes, Trading Briefing is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Trading Briefing support?

Trading Briefing is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Trading Briefing?

It is built and maintained by huiLI203 (@huili203); the current version is v1.0.0.

💬 Comments