← 返回 Skills 市场
Position Tracker
作者
Shadow Rose
· GitHub ↗
· v1.0.1
· MIT-0
268
总下载
0
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install position-tracker
功能描述
Keep track of positions across any exchange, broker, or external system. Detect orphans, prevent leaks. Self-healing state reconciliation for any stateful bot.
安全使用建议
This skill appears to do what it says: a local state machine and reconciliation helper that relies on user-supplied adapters to talk to external systems. Before installing or enabling in production: 1) Review the provided position_tracker.py source (you already have it) and any adapter code you will plug in. 2) Do not enable enable_auto_reconcile (or set auto_close) against real trading/billing accounts until you have thoroughly tested behaviors in a safe sandbox — auto-reconcile can call adapter.close_position() and have financial impact. 3) Keep adapter credentials (API keys, secrets) out of this library; supply them only to the adapter implementation and store them securely. 4) Prefer copying and reviewing the shipped file rather than blindly running pip install unless you verify the package provenance. 5) Configure a dedicated state_dir with restrictive permissions and set conservative min_position_value/max_positions to avoid noisy or destructive auto-actions. 6) Fix documentation drift (e.g., log_file mentioned in docs but not in constructor) or verify the exact API surface in your deployed copy.
功能分析
Type: OpenClaw Skill
Name: position-tracker
Version: 1.0.1
The bundle provides a legitimate state management framework for tracking external positions (e.g., trading, cloud resources) and reconciling them against local state. The Python code in position_tracker.py implements a standard state machine with safe file-handling practices (atomic writes with fsync) and contains no evidence of data exfiltration, unauthorized execution, or hidden backdoors. The documentation in SKILL.md and README.md is consistent with the code's purpose and does not contain any prompt-injection attempts or malicious instructions for the AI agent.
能力评估
Purpose & Capability
The name/description claim a generalized state machine for tracking external positions and reconciling state. The shipped code and SKILL.md implement exactly that: a PositionTracker class, an ExternalAPIAdapter interface, and persistence to a local state file. Nothing in the bundle requests unrelated credentials or system access that would be out of scope for a position tracker. Adapters you write will legitimately need credentials for the external systems they talk to — that is expected and not requested by the skill itself.
Instruction Scope
Runtime instructions stay within the stated purpose: implement an ExternalAPIAdapter, call detect_orphans(), cleanup_orphans(), reconcile(), etc. The code reads/writes only its state_dir/state_file and does not reference other system paths, environment variables, or remote endpoints on its own. Notes: the docs mention features (e.g., log_file parameter, MockAPIAdapter/tests) that are not present or not obviously exposed in the code — minor documentation drift. Also, the library can auto-close remote positions via adapter.close_position when enable_auto_reconcile is enabled; that behavior is consistent with the purpose but is a high-impact action users must control.
Install Mechanism
No install spec is provided in the registry (instruction-only skill). The SKILL.md suggests 'pip install position-tracker' or copying position_tracker.py; there is no package provenance in the registry metadata or homepage to verify the pip package. As distributed here, the safer option is to copy/review the provided position_tracker.py. No downloads or archive extraction occur during install in the bundle.
Credentials
The skill declares no required environment variables, primary credential, or config paths. This is appropriate because it delegates external API access to user-provided adapters; those adapters will be the place to supply credentials (API keys, secrets). The lack of requested secrets in the skill itself is proportionate. One caveat: enabling auto_reconcile allows the skill to trigger adapter.close_position() — if an adapter uses credentials to close real money positions, that is a powerful capability and should be guarded.
Persistence & Privilege
The skill persists only its own state to a configurable state_dir (default './state') and uses atomic writes. always:false and user-invocable:true. It does not modify other skills or system-wide agent settings. Recommendation: run with a dedicated state directory and filesystem permissions appropriate to your risk model.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install position-tracker - 安装完成后，直接呼叫该 Skill 的名称或使用
/position-tracker触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.1
- Clarified and expanded documentation in SKILL.md for state management, orphan detection, and self-healing reconciliation.
- Added detailed explanations of position lifecycle, configuration options, and use cases.
- Included code examples for setup, integration, and core API usage.
- Improved Quick Start guide and API reference for easier onboarding.
- No functional or codebase changes; this update focuses on documentation clarity and completeness.
元数据
常见问题
Position Tracker 是什么？
Keep track of positions across any exchange, broker, or external system. Detect orphans, prevent leaks. Self-healing state reconciliation for any stateful bot. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 268 次。
如何安装 Position Tracker？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install position-tracker」即可一键安装，无需额外配置。
Position Tracker 是免费的吗？
是的，Position Tracker 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Position Tracker 支持哪些平台？
Position Tracker 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Position Tracker？
由 Shadow Rose（@theshadowrose）开发并维护，当前版本 v1.0.1。
推荐 Skills