← 返回 Skills 市场
Signal Generator
作者
nititepfirm
· GitHub ↗
· v1.0.0
1852
总下载
0
收藏
2
当前安装
1
版本数
在 OpenClaw 中安装
/install signal-generator
功能描述
Generate trading signals using BB Breakout or RSI Reversal strategies and send automated alerts to Discord, Telegram, or custom channels.
安全使用建议
This skill produces trading signals locally and saves them to last_signal.json, but it does not itself send messages to Discord/Telegram despite the documentation saying it will. Before installing or running: 1) Do not assume it will post to external channels — inspect or add delivery code that uses secure storage of API tokens if you want that behavior. 2) Review any /root/quant-trading-bot repository on your system: the script inserts '/root/quant-trading-bot' onto sys.path and may import code from there, which could run with your environment's privileges or access secrets. 3) Run the skill in an isolated environment (non-root container or VM) and verify exactly what network calls it makes (it should only call Binance public endpoints via ccxt). 4) If you expect alerts to be sent automatically, either configure a safe delivery wrapper (with explicit, secure tokens) or confirm how OpenClaw will pick up last_signal.json and deliver alerts on your behalf. 5) If you are not comfortable with the host-path dependency or the missing send-logic, treat this package as incomplete or require the author to clarify and fix before use.
功能分析
Type: OpenClaw Skill
Name: signal-generator
Version: 1.0.0
The skill is classified as suspicious primarily due to its explicit dependency on and import from the `/root/quant-trading-bot` directory, as seen in `run.sh`, `signal_generator.py`, `SKILL.md`, and `README.md`. While this path is plausibly a legitimate dependency within the OpenClaw ecosystem, relying on a privileged `/root` directory for Python environments and modules introduces a potential supply chain risk. If the `quant-trading-bot` component were compromised, or if the environment allowed unauthorized modification of files in `/root`, this skill could inadvertently execute malicious code. The skill also suggests setting up a cron job for persistence, which, while documented and aligned with its purpose, adds to the overall risk profile when combined with the privileged path dependency.
能力评估
Purpose & Capability
SKILL.md and README claim the skill will 'send alerts to Discord/Telegram' and accept 'targets' in config, but signal_generator.py never implements network posting or uses the 'targets' configuration — it only writes last_signal.json. The code does implement data fetching and indicator calculations (ccxt/binance for public OHLCV), which fits the signal-generation purpose. However, the script also force-inserts '/root/quant-trading-bot' onto sys.path and run.sh/README reference a /root/quant-trading-bot venv — this external dependency on a host path is unexpected for a standalone skill and not justified by the documentation.
Instruction Scope
Runtime instructions tell the user to configure channel IDs and imply the skill will send alerts; the code only formats messages and saves signals to last_signal.json. SKILL.md's troubleshooting explicitly directs checking /root/quant-trading-bot, which means the runtime behavior can depend on files outside the skill directory. The instructions do not request tokens/credentials for Discord/Telegram, nor do they explain how those targets will be used, leaving ambiguity and possible scope creep (relying on external system integration).
Install Mechanism
There is no install spec (instruction-only), so nothing is downloaded by an installer. That's low risk. However, package.json and run.sh reference Python packages and a /root/quant-trading-bot venv, which suggests the author expects a specific host environment; that is unconventional but not directly malicious.
Credentials
The skill declares no required env vars or credentials, yet advertises sending alerts to Discord/Telegram. If users expect autonomous sending, tokens would normally be required — their absence indicates either (a) the skill expects OpenClaw to perform delivery from last_signal.json, or (b) the implementation is incomplete. Additionally, modifying sys.path to include '/root/quant-trading-bot' lets the skill import arbitrary code from that host path, which could expose or reuse credentials and is disproportionate for a simple signal generator.
Persistence & Privilege
The skill is not marked always:true and does not request system-wide configuration changes. It writes last_signal.json in its own directory and otherwise does not persist or alter other skills. Autonomous invocation is allowed (default) but not a special privilege here.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install signal-generator - 安装完成后，直接呼叫该 Skill 的名称或使用
/signal-generator触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release - BB Breakout & RSI Reversal strategies
元数据
常见问题
Signal Generator 是什么？
Generate trading signals using BB Breakout or RSI Reversal strategies and send automated alerts to Discord, Telegram, or custom channels. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 1852 次。
如何安装 Signal Generator？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install signal-generator」即可一键安装，无需额外配置。
Signal Generator 是免费的吗？
是的，Signal Generator 完全免费（开源免费），可自由下载、安装和使用。
Signal Generator 支持哪些平台？
Signal Generator 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Signal Generator？
由 nititepfirm（@nititepfirm）开发并维护，当前版本 v1.0.0。
推荐 Skills