← 返回 Skills 市场
91
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install stock-auto-trade
功能描述
股票交易下单和查询功能。需要提供股票代码、价格、数量等信息。支持买入、卖出、持仓查询、账户查询、撤单等操作。
安全使用建议
This skill will call a local trading service to execute real buy/sell orders. Before installing or enabling it: 1) Do not install or run software from gp998.com unless you can verify its trustworthiness and source (prefer vendor with clear reputation and audited code). 2) Confirm where your brokerage credentials/API keys are stored (the skill examples use an X-API-Key but the skill does not declare credentials) and never paste live keys into untrusted software. 3) Disable autonomous invocation or require explicit user confirmation for any trade — otherwise the agent could place orders without your prompt. 4) If you test, use a sandbox/paper‑trading environment only. 5) If you must proceed, inspect and control the local trading helper (network access, logs, and what it transmits), and monitor account activity closely. If you are unsure about the external helper or credential handling, do not enable this skill.
功能分析
Type: OpenClaw Skill
Name: stock-auto-trade
Version: 1.0.0
The skill facilitates automated stock trading by sending HTTP requests via `curl` to a local API service (`localhost:8888`). While its behavior is aligned with the stated purpose, it is classified as suspicious due to the high-risk nature of financial transactions and its explicit dependency on external software from `https://www.gp998.com`. Additionally, the documentation in `SKILL.md` uses a hardcoded test API key (`test-api-key-12345`), which could lead to insecure user configurations.
能力评估
Purpose & Capability
Name/description describe trading (place orders, query positions/account, cancel orders) and the SKILL.md shows curl examples to a localhost API which is consistent with a skill that proxies a local trading helper. Requiring curl only is proportional. However, the skill also instructs users to download a third‑party '股票智能交易助手' from https://www.gp998.com (external software), which is not part of the skill package and raises questions about provenance and whether that external component is actually required/trusted.
Instruction Scope
The runtime instructions tell the agent to POST/GET to http://localhost:8888 endpoints and include an X-API-Key header. The SKILL.md implicitly depends on a separate local service that will hold brokerage credentials and perform real trades. The instructions do not require or document how API keys/credentials are supplied securely, nor do they mandate explicit user confirmation before trading. They also advise installing external software from an unvetted site (gp998.com). These factors expand the scope to potentially controlling real finances with little built-in guardrails.
Install Mechanism
There is no install spec in the skill (instruction-only), which is low risk by itself. However, the documentation instructs users to download and install a third‑party trading helper from a specific URL and provides contact QQ — that instruction effectively delegates installation to an unverified external site. The skill itself does not install code, but it depends on external software whose safety and integrity are unknown.
Credentials
The skill declares no required environment variables or primary credentials, yet all example requests include an X-API-Key header (defaulting to 'test-api-key-12345'). This is an incoherence: a trading skill that places orders should clearly declare how credentials are obtained/stored. The lack of declared credentials means the agent or user might need to configure secrets elsewhere (e.g., in the local trading helper), and those secrets could be used to execute financial transactions. Asking users to install external software further obscures where credentials live.
Persistence & Privilege
always:false and disable-model-invocation:false (normal). On its own this is acceptable, but because the skill can place trades, the combination of autonomous invocation with no explicit confirmation steps or declared safeguards increases risk. The skill does not request system-wide privileges or modify other skills.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install stock-auto-trade - 安装完成后，直接呼叫该 Skill 的名称或使用
/stock-auto-trade触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release of stock-auto-trade skill.
- 提供股票交易自动下单和查询功能，包括买入、卖出、持仓查询、账户查询、撤单等操作
- 通过 HTTP API 与本地股票交易助手集成，需提前安装并配置
- 支持限价单、市价单及委托查询等多种常用交易指令
- 明确区分适用与不适用场景，避免误用
- 提供详细参数填写说明、错误码和请求响应示例
元数据
常见问题
股票交易下单买卖和查询。 是什么？
股票交易下单和查询功能。需要提供股票代码、价格、数量等信息。支持买入、卖出、持仓查询、账户查询、撤单等操作。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 91 次。
如何安装 股票交易下单买卖和查询。？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install stock-auto-trade」即可一键安装，无需额外配置。
股票交易下单买卖和查询。 是免费的吗？
是的，股票交易下单买卖和查询。 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
股票交易下单买卖和查询。 支持哪些平台？
股票交易下单买卖和查询。 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 股票交易下单买卖和查询。？
由 yangheng3（@yangheng3）开发并维护，当前版本 v1.0.0。
推荐 Skills