XTrade Futu Paper Trade

使用富途纸面交易API查询行情、持仓并下单

This skill will run code on your machine: it auto-creates a virtual environment and pip-installs futu-api and akshare, then contacts a local FutuOpenD service to query and place simulated trades. Before installing or enabling it, consider the following: - Source & provenance: the skill's homepage/source is unknown. Prefer skills from a verified repository or author. Review the full xtrade_futu_skill.py source yourself (it is included) or run it in an isolated environment first. - Credentials: it expects sensitive environment variables (FUTU_TRADE_PWD, FUTU_PASSWORD, FUTU_ACCOUNT). Do not set real account passwords in long-lived environment variables. Prefer temporary or limited-scope credentials and confirm FUTU_TRD_ENV is set to PAPER/SIMULATE. - Runtime install: the script will pip install packages at runtime. That fetches and executes third-party code from PyPI; if you do not trust futu-api/akshare or want deterministic installs, inspect requirements and pin versions, or pre-create the venv yourself. - Network behavior: besides communicating with the local FutuOpenD daemon, akshare may fetch data from public web sources. If you need to restrict outbound network access, run the skill in a sandbox with network policies. - Testing: run the skill in a sandboxed VM or container first and verify it only talks to your local OpenD and expected external services. Check logs and network traffic. - If you rely on the agent autonomously invoking this skill, remove autonomous privileges or monitor actions: automatic order placement can have costly consequences even in paper mode if misconfigured. Given the metadata mismatch (no declared env vars) and unknown origin, proceed with caution — the behavior is coherent for a paper-trading tool but the missing declarations and runtime package installs elevate risk.

Type: OpenClaw Skill Name: xtrade-futu-paper-trade Version: 1.0.0 The skill bundle provides a legitimate interface for Futu paper trading and financial data retrieval using the official 'futu-api' and 'akshare' libraries. It includes explicit safety checks in `xtrade_futu_skill.py` to prevent execution in real-money environments (rejecting 'REAL' and defaulting to 'SIMULATE'). While the script performs automated environment setup by creating a virtual environment and installing dependencies, this behavior is transparently documented in `SKILL.md` and serves a functional purpose for ensuring Python version compatibility. No evidence of data exfiltration, malicious code execution, or harmful prompt injection was found.