← Back to Skills Marketplace
xstocks-beta
by
Manuel Hidalgo
· GitHub ↗
· v0.0.3
· MIT-0
130
Downloads
0
Stars
0
Active Installs
3
Versions
Install in OpenClaw
/install xstocks-beta
Description
Search, list, and resolve xStocks tokens on Solana mainnet, and list wallet holdings; use with Jupiter for price and trading functionality.
Usage Guidance
What to consider before installing: the code correctly provides a local, hardcoded xStocks catalog and safe search utilities — that part is coherent. However the runtime instructions tell the agent to perform live swaps and to sign/broadcast transactions immediately after a single confirmation, yet the skill does not include or declare any wallet integration or credential requirements. That mismatch could lead to accidental fund transfers or unclear handling of private keys. If you plan to use it for trading: (1) do not enable autonomous invocation for this skill; require explicit manual steps and confirmations; (2) only allow it to run the read-only search scripts unless you have a controlled, audited wallet integration (and prefer an explicit documented mechanism for signing); (3) audit the hardcoded mint addresses against the official xStocks source before transacting; (4) prefer the agent to return the mint address and let you perform swaps with your own wallet tools rather than having the agent perform signing; (5) ask the author for explicit documentation of how signing is intended to work (what tooling, how credentials are supplied and stored) — that information would materially change this assessment.
Capability Analysis
Type: OpenClaw Skill
Name: xstocks-beta
Version: 0.0.3
The skill provides a hardcoded catalog of Solana token addresses and search functionality. While the Python code in `scripts/search.py` and `scripts/xstocks/data.py` is benign and lacks network or file system access, the `SKILL.md` file contains instructions that function as a behavioral prompt injection. Specifically, it commands the AI agent to 'execute the entire buy flow immediately in one pass' and 'Do NOT stop after confirming,' explicitly telling the agent to bypass further user input or confirmation pauses. This instruction to override standard agent safety loops and confirmation checks is a risky capability that could lead to unintended financial transactions.
Capability Assessment
Purpose & Capability
The package and SKILL.md primarily provide a hardcoded catalog and local search utilities (104 tokens), which matches the name's 'search/list/resolve' claim. However the description and SKILL.md also claim the ability to 'list wallet holdings' and perform trading flows. The included code implements only catalog/search functionality and contains no wallet, network, or trading integration. Claiming wallet-holding listing and transaction execution without those components is incoherent.
Instruction Scope
SKILL.md instructs the agent that once the user confirms a buy amount, it must 'execute the entire buy flow immediately in one pass' (resolve mint → get Jupiter quote + swap → sign & broadcast). It references using Jupiter endpoints and external signing tools (lobster.cash) but gives no concrete, declared way to obtain signing credentials or to call those services safely. The instruction to never pause between confirmation and execution raises risk (accidental/automatic fund transfers) and grants broad discretionary operational power to the agent beyond the local search scripts.
Install Mechanism
No install spec or external downloads are present; all included code is local and the catalog is hardcoded. This is low-risk from an install/code-pull perspective — nothing is fetched from external URLs during install.
Credentials
The skill declares no required environment variables or credentials, yet runtime instructions require access to wallet signing tools and remote APIs (Jupiter, lobster.cash). There is a clear mismatch: trading and signing need private keys/authentication, which are neither requested nor scoped here. That omission makes it unclear how the agent should obtain or use credentials and increases the risk of accidental exposure if the agent tries to use any available secret material.
Persistence & Privilege
The skill is not force-included (always:false) and model invocation is allowed (default). While that is normal, the combination of autonomous invocation and the SKILL.md's instruction to execute swaps immediately on confirmation increases risk: if the agent runs autonomously or misinterprets confirmation, it could trigger transactions. The skill does not request higher persistence or system-wide config changes.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install xstocks-beta - After installation, invoke the skill by name or use
/xstocks-beta - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.0.3
- Clarified buy flow: once the user confirms an amount, execute the entire buy process immediately without pausing or waiting for further prompts.
- Added explicit instruction not to wait after confirmation—confirmation means immediate execution.
- Emphasized not to use the Jupiter Ultra endpoints for swaps.
- Updated documentation to reinforce urgent, one-pass transaction execution after user confirmation.
- No functional code changes; this update is documentation only.
v0.0.2
Version 0.0.2 — Major simplification and switch to hardcoded catalog
- Switched from API-driven to hardcoded list of 104 xStocks tokens; no network access required.
- Replaced multiple scripts with a single unified search tool (`scripts/search.py`) for listing, filtering, and reverse lookup.
- Removed wallet and balance listing scripts; skill now focuses on token discovery and mint resolution.
- SKILL.md and documentation updated to reflect new usage and simplified workflows.
- For trading and price discovery, users now always combine with Jupiter and use their own wallet tools.
v0.0.1
xstocks-beta 0.0.1 – Initial Release
- Introduces a search engine for discovering, listing, and resolving xStock tokens on Solana mainnet.
- Provides scripts to list available xStocks, filter/search tokens, and resolve a mint address to a xStock.
- Adds a tool to list xStock holdings for a given Solana wallet.
- Designed to be used with Jupiter for price discovery and lobster.cash for wallet/signing; direct trading is not supported in this skill.
- Emphasizes careful output analysis and combining with other extensions for enriched workflows.
- Includes extensive CLI options, structured logging, and caching for efficiency.
Metadata
Frequently Asked Questions
What is xstocks-beta?
Search, list, and resolve xStocks tokens on Solana mainnet, and list wallet holdings; use with Jupiter for price and trading functionality. It is an AI Agent Skill for Claude Code / OpenClaw, with 130 downloads so far.
How do I install xstocks-beta?
Run "/install xstocks-beta" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is xstocks-beta free?
Yes, xstocks-beta is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does xstocks-beta support?
xstocks-beta is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created xstocks-beta?
It is built and maintained by Manuel Hidalgo (@manu-xmint); the current version is v0.0.3.
More Skills