← 返回 Skills 市场
969
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install tbot-controller
功能描述
Operate TradingBoat/TBOT (TBOT runtime stack) via a controlled automation interface (DB-first queries; lifecycle control on explicit request).
安全使用建议
This skill appears to do what it says: discover a local TBOT runtime, read DBs (read-only by default), manage services (docker/systemd) only after explicit confirmation, and generate/send TradingView-style webhook JSON. Before installing: 1) Review the included scripts yourself — they will search for and read .env and .keyfile in candidate runtime folders (these can contain broker/webhook secrets). 2) Understand that tbotjson.py will perform HTTP POSTs to the configured webhook URL (default localhost, but user-supplied values are allowed) — do not point it at unknown remote endpoints or supply secret keys you don't want transmitted. 3) Note that many environment variables are used by the scripts though not declared as 'required' in metadata; consider storing sensitive values securely and limit where .env/.keyfile live. 4) Test in a safe environment (local VM or dev machine) with RUN_IT unset to confirm read-only behavior; only set --run-it or RUN_IT=1 when you intentionally want mutating control. If you lack confidence, ask for the author's provenance or run the skill code in isolation first.
功能分析
Type: OpenClaw Skill
Name: tbot-controller
Version: 1.0.0
The skill is designed to operate a TradingBoat/TBOT runtime stack, which inherently involves executing system commands (docker, systemctl), reading configuration files (.env, docker-compose.yml), accessing a SQLite database, and making network calls (webhooks, health checks). All these actions are explicitly described in SKILL.md and implemented with clear safety mechanisms. The code uses `subprocess.run` with lists of arguments to prevent shell injection, enforces read-only access for database operations, and requires explicit `--run-it` confirmation for state-changing actions. There is no evidence of intentional harmful behavior such as data exfiltration to unauthorized endpoints, backdoor installation, or prompt injection designed to subvert the agent's safety protocols for malicious ends. The instructions in SKILL.md are designed to constrain the agent's behavior towards safety.
能力评估
Purpose & Capability
The name/description align with the included files: discovery, DB-read helpers, lifecycle control (docker/systemd), and webhook JSON generation. The brew install of 'uv' and the bash entrypoint are consistent with running the packaged Python scripts. Generating and sending webhook JSON to TBOT is explicitly implemented in scripts/tbotjson.py and matches the declared 'json' mode.
Instruction Scope
SKILL.md requires OpenClaw to invoke only the provided bash entrypoint and to run discovery before control actions; the scripts follow that contract. However the runtime instructions and scripts perform filesystem discovery (search candidate runtime dirs, read .env and .keyfile), run subprocesses (docker, systemctl), read local SQLite DBs, and tbotjson.py will ALWAYS POST generated JSON to a webhook URL (which may be overridden). The SKILL.md states 'DB-first, discovery only for status/control' but tbotjson.py performs discovery to locate webhook keys — a minor inconsistency that expands the skill's read-surface. Overall the instructions are feature-coherent but grant broad discretion to read files and make network calls when used.
Install Mechanism
Installation uses a single brew formula 'uv' which is the documented runtime helper for this skill. Using Homebrew for a known package is low-to-moderate risk; nothing in the install spec downloads arbitrary archives or writes unexpected files. The skill expects the 'uv' binary to exist and will instruct users to 'brew install uv' if missing.
Credentials
The registry metadata lists no required env vars, but the SKILL.md and code reference and rely on many environment variables (MODE, COMPOSE_DIR, TBOT_COMPOSE_DIR, TBOT_WEBHOOK_URL, WEBHOOK_KEY, TVWB_UNIQUE_KEY, TBOT_DB_PATH / TBOT_DB_OFFICE, RUN_IT, SYSTEMD_USER, DEFAULT_*). The scripts will read .env and .keyfile files to obtain webhook keys and other runtime secrets. While these env/file accesses are explainable given the purpose, they are not declared in 'requires.env' and mean the skill can read local secret-bearing files and potentially transmit values to a webhook endpoint.
Persistence & Privilege
The skill is not marked always:true and does not request persistent system-wide privileges. It does run subprocesses and may start/stop services only with explicit confirmation (--run-it or RUN_IT=1). It doesn't modify other skills or system-wide agent settings. Autonomous invocation (disable-model-invocation=false) is normal platform behavior and not by itself a red flag here.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install tbot-controller - 安装完成后，直接呼叫该 Skill 的名称或使用
/tbot-controller触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release of tbot-controller – an interface for controlling and querying TradingBoat/TBOT runtime stacks.
- Supports querying TBOT sqlite DB for alerts, orders, errors, and portfolio (DB-first).
- Allows starting/stopping TBOT runtime (docker compose or systemd) with explicit confirmation required for control actions.
- Provides on-demand health checks and recent log retrieval.
- Implements strong safety rules: defaults to read-only, requires --run-it or RUN_IT=1 for state-changing actions, refuses to print secrets.
- Probes and discovers runtime location; refusal if location or DB cannot be determined.
- Separates install/config of TBOT runtime; this skill operates only if runtime exists, otherwise read-only DB queries are available.
- Requires use of a bash entrypoint script and isolated Python environment (via uv).
元数据
常见问题
TBOT Controller 是什么？
Operate TradingBoat/TBOT (TBOT runtime stack) via a controlled automation interface (DB-first queries; lifecycle control on explicit request). 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 969 次。
如何安装 TBOT Controller？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install tbot-controller」即可一键安装，无需额外配置。
TBOT Controller 是免费的吗？
是的，TBOT Controller 完全免费（开源免费），可自由下载、安装和使用。
TBOT Controller 支持哪些平台？
TBOT Controller 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 TBOT Controller？
由 PlusGenie（@plusgenie）开发并维护，当前版本 v1.0.0。
推荐 Skills