Noah Stock Trade

用于股票交易相关的订单、成交、可买可卖数量、订单详情、订单费用、下单前费用预估，以及账户、持仓、证券资产、资金流水等场景。当用户询问今日订单、历史订单、今日成交、历史成交、订单状态、订单详情、费用明细、可买可卖数量、融资最大可买数量、账户信息、当前持仓、证券资产、资金流水、组合概览、交易前评估时使用。优先通过统一...

This skill appears to implement the trade-query functionality it describes, but pay attention to these points before installing: (1) The metadata declares no required env vars, yet the code and docs require NOAH_TRADE_API_BASE_URL and a Bearer token (NOAH_MARKET_APIKEY or NOAH_MARKET_TOKEN). Expect to provide those. (2) On import the code will attempt to load .secrets files from the workspace and ~/.openclaw/.secrets — review those paths and their content before running to avoid unintentionally exposing unrelated secrets. (3) Prefer running the skill in an isolated/test environment and with a scoped test token (not your main production credentials) until you audit the code. (4) If you need to proceed, verify the base_url is the official trade API host and that the Bearer token has minimal privileges; consider modifying or removing automatic env-file loading if you do not want the skill to read other local secrets. If you want, I can list the exact files/paths the skill will read and point to the lines in the code that do so.

Type: OpenClaw Skill Name: noah-stock-trade Version: 0.1.4 The noah-stock-trade skill is a legitimate tool designed for querying stock account information, positions, and performing pre-trade fee estimations. The code (specifically scripts/noah_trade_cli.py and scripts/trade_client.py) implements a structured CLI and HTTP client that communicates with a designated API endpoint (stock-open-api.noahgroup.com) using standard Bearer token authentication. The SKILL.md instructions explicitly restrict the AI agent to read-only operations and provide safety guidelines to prevent unauthorized trade execution, while the configuration logic (scripts/config.py) follows standard practices for loading local environment secrets without any signs of exfiltration or malicious intent.