← 返回 Skills 市场
mbordash

Openclaw

作者 Michael Bordash · GitHub ↗ · v1.3.0 · MIT-0
cross-platform ⚠ suspicious
133
总下载
1
收藏
0
当前安装
4
版本数
在 OpenClaw 中安装
/install dradis-tactical-command
功能描述
Real-time supervisor and control interface for the DRADIS Polymarket high-frequency trading engine. Full support for DRADIS_API_KEY authentication.
使用说明 (SKILL.md)

Skill: DRADIS Tactical Command (v1.3.0)

Full-featured autonomous supervisor for the DRADIS high-frequency prediction market execution engine.

About DRADIS

DRADIS is an open-source, low-latency Rust-based trading engine for Polymarket.
It features a Viper strategy engine, real-time equity curve, dynamic config hot-reloading, and a built-in LLM advisor.

Project repository: https://github.com/mbordash/DRADIS

Publisher Note (Addressing ClawScan Findings)

ClawScan has flagged two medium-risk items (as expected for any live-trading integration):

  • Ability to PATCH live strategy parameters
  • Forwarding of a sensitive DRADIS_API_KEY

These are intentional and documented. The skill never applies config changes without explicit human confirmation. I strongly recommend using a dedicated, least-privilege API key and only running this skill against your own trusted DRADIS instance.

Authentication

DRADIS supports optional API key authentication via the X-API-Key header.

  • Set DRADIS_API_KEY in your OpenClaw configuration.
  • The skill automatically adds the header to every request.
  • Local use works without a key; remote/production use strongly recommends it.

Safety & Usage Guidelines (Critical)

This skill controls a live trading system with real money at risk.
The agent must follow these guardrails at all times:

  • patch_dynamic_config changes live strategy parameters without restarting the engine.
    Never apply any configuration change without first explicitly confirming the exact update with the human user and receiving clear approval.
  • Only call tools when the user’s request directly relates to monitoring or configuration.
  • If the engine returns 401 Unauthorized, tell the user to configure the DRADIS_API_KEY.

Example Natural Language Commands

  • “What’s the current status of DRADIS?”
  • “Show me open positions and session P&L”
  • “What markets is each strategy currently trading?”
  • “List the last 10 trades”
  • “What does the LLM advisor recommend right now?”
  • “Show me the current config”
  • “Can you increase the adverse block threshold? Show me the current config first and confirm before patching.”

Configuration

  • DRADIS_API_URL: Base URL for the engine API (Default: http://localhost:9000/api)
  • DRADIS_API_KEY: API key for authentication (optional locally, recommended for remote/production)

Tools

1. check_engine_status

  • Method: GET
  • Endpoint: {{DRADIS_API_URL}}/health
  • Headers: X-API-Key: {{DRADIS_API_KEY}}
  • Response Format: Text or JSON

2. get_current_config

  • Method: GET
  • Endpoint: {{DRADIS_API_URL}}/config
  • Headers: X-API-Key: {{DRADIS_API_KEY}}
  • Response Format: JSON object of all configurable fields

3. patch_dynamic_config

  • Method: PATCH
  • Endpoint: {{DRADIS_API_URL}}/config
  • Headers: X-API-Key: {{DRADIS_API_KEY}}
  • Payload Type: application/json
  • Parameters: updates object (e.g. {"gboost_obi_adverse_block": -0.15, "enable_basis": false})
  • Safety Note: Requires explicit user confirmation before executing.

4. check_session_pnl

  • Method: GET
  • Endpoint: {{DRADIS_API_URL}}/pnl/history
  • Headers: X-API-Key: {{DRADIS_API_KEY}}
  • Response Format: JSON array of equity snapshots

5. get_recent_trades

  • Method: GET
  • Endpoint: {{DRADIS_API_URL}}/trades
  • Headers: X-API-Key: {{DRADIS_API_KEY}}
  • Query Param: limit (optional, default 100)

6. get_open_positions

  • Method: GET
  • Endpoint: {{DRADIS_API_URL}}/positions
  • Headers: X-API-Key: {{DRADIS_API_KEY}}
  • Response Format: JSON array of open position records

7. get_strategy_status

  • Method: GET
  • Endpoint: {{DRADIS_API_URL}}/status
  • Headers: X-API-Key: {{DRADIS_API_KEY}}
  • Response Format: JSON object of strategy → market mapping

8. get_llm_recommendations

  • Method: GET
  • Endpoint: {{DRADIS_API_URL}}/llm/recommendations
  • Headers: X-API-Key: {{DRADIS_API_KEY}}
  • Query Param: limit (optional, default 10)
安全使用建议
Only install this if you intentionally want an agent to monitor and potentially modify a DRADIS trading engine. Use a trusted local or private DRADIS_API_URL, a dedicated least-privilege API key, and require manual confirmation plus rollback planning before any configuration patch.
功能分析
Type: OpenClaw Skill Name: dradis-tactical-command Version: 1.3.0 The skill provides a management interface for the DRADIS trading engine, allowing users to monitor performance and update strategy configurations via a REST API. While it handles sensitive credentials (DRADIS_API_KEY) and supports configuration patching, these capabilities are essential to its stated purpose and are accompanied by explicit safety instructions requiring human confirmation before execution. No evidence of data exfiltration, unauthorized execution, or malicious intent was found in SKILL.md or _meta.json.
能力标签
requires-sensitive-credentials
能力评估
Purpose & Capability
The monitoring and control capabilities match the stated purpose of supervising a DRADIS trading engine, but the purpose itself is high-impact because it involves live trading with real money.
Instruction Scope
The skill instructs the agent to require explicit human confirmation before patching configuration, but the PATCH operation accepts a broad updates object for live strategy parameters and the artifacts do not define field allowlists, value bounds, rollback, or containment.
Install Mechanism
There is no install spec and no code files; this is an instruction-only skill, so there is no hidden package install or executable artifact to review.
Credentials
The DRADIS_API_URL and DRADIS_API_KEY usage is disclosed and purpose-aligned, but the registry metadata does not declare required environment variables or a primary credential even though the skill documentation describes API key use.
Persistence & Privilege
No persistence or background worker is shown, but forwarding DRADIS_API_KEY to every request is privileged access to the trading supervisor and should be scoped carefully.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install dradis-tactical-command
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /dradis-tactical-command 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.3.0
Added Publisher Note addressing ClawScan's two Medium findings (live config patching + API key usage)
v1.2.0
Added homepage link to DRADIS repo + short About section so users understand the project
v1.1.0
Added full support for DRADIS_API_KEY + X-API-Key header authentication (matches latest README)
v1.0.0
Initial release: full Polymarket trading engine supervisor with health, P&L, positions, trades, config, strategy status, and LLM recommendations
元数据
Slug dradis-tactical-command
版本 1.3.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 4
常见问题

Openclaw 是什么?

Real-time supervisor and control interface for the DRADIS Polymarket high-frequency trading engine. Full support for DRADIS_API_KEY authentication. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 133 次。

如何安装 Openclaw?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install dradis-tactical-command」即可一键安装,无需额外配置。

Openclaw 是免费的吗?

是的,Openclaw 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Openclaw 支持哪些平台?

Openclaw 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Openclaw?

由 Michael Bordash(@mbordash)开发并维护,当前版本 v1.3.0。

💬 留言讨论