← 返回 Skills 市场
655
总下载
0
收藏
0
当前安装
6
版本数
在 OpenClaw 中安装
/install tiger-trade
功能描述
Execute US and HK stock trades via Tiger Brokers API. Use when user wants to buy or sell stocks, manage investment portfolio, place orders for US ETFs or HK...
安全使用建议
This skill appears to implement Tiger Brokers trading calls, but it has multiple inconsistencies and missing declarations. Before installing or using it: 1) Verify the skill's source and author (no homepage/source provided). 2) Do not place your broker private key into an unencrypted ~/.tiger-config.json unless you accept the risk — prefer a secure vault or environment-scoped secret. 3) Confirm and install dependencies (Python and tigeropen) in a controlled environment; the skill metadata does not declare them. 4) Inspect and test the code in a sandbox (look for any network calls beyond Tiger's endpoints) and correct the SKILL.md bugs (filename mismatch and Python ~ expansion). 5) If you plan to allow autonomous agent invocation, only do so after ensuring the skill cannot read other files or exfiltrate secrets. These issues are likely sloppy engineering rather than malicious intent, but they raise enough doubt to warrant careful review and remediation before use.
功能分析
Type: OpenClaw Skill
Name: tiger-trade
Version: 1.0.5
The skill provides high-risk financial trading capabilities via the Tiger Brokers API. While it appears to be a legitimate tool, the SKILL.md file contains a 'Quick Trade' Python example with hardcoded parameters (stock '02800', quantity '10000', and 'sandbox = False') that could lead an AI agent to execute a large, unintended live transaction (~268,000 HKD) if it follows the snippet literally. Additionally, the code contains a functional flaw where it attempts to open a file path using the tilde (~) character without proper shell expansion, and the setup instructions contain a typo (trailing space in the filename '~/.tiger-config.json ').
能力评估
Purpose & Capability
The skill claims to execute trades via the Tiger Brokers API, and the SKILL.md shows code that uses the tigeropen client to place orders — this matches the stated purpose. However the package/dependency (tigeropen/Python runtime) and the required config file are not declared in the skill metadata/requirements, which is unexpected for a runtime that relies on that library and an on-disk private key.
Instruction Scope
Runtime instructions tell the agent to create and read a config file at ~/.tiger-config.json containing tiger_id/account/private_key_pk8 and to use it to sign API requests. That is within the trading purpose, but the SKILL.md has inconsistent filenames (top header says tiger-config.json, Setup says ~/.tiger-config.json) and uses open('~/.tiger-config.json') which does not expand ~ in Python — indicating sloppy/buggy instructions. The instructions require reading a sensitive private key from the user's home directory but do not instruct how to secure it or offer alternatives (env var, secure vault). There are no instructions to install or verify the tigeropen library, so an agent following the SKILL.md might fail or try to fetch/install packages on the fly.
Install Mechanism
This is an instruction-only skill (no install spec). That alone is low-risk, but the runtime code depends on the tigeropen Python package and a Python runtime; those requirements are not declared. Missing dependency declarations increase the chance an agent will attempt to install packages at runtime or run incorrect ad-hoc commands, which is a safety and coherence concern.
Credentials
No required env vars or config paths are declared in the registry metadata, yet the SKILL.md requires a user config file containing a private key and account id. Requesting a private key is reasonable for trading, but the skill does not justify why it uses an on-disk plain JSON private key, does not advise secure storage, and does not declare the config path in metadata. The lack of declared primary credential or config path is a mismatch.
Persistence & Privilege
The skill is not force-included (always: false) and is user-invocable; it does not request persistent privileges or system-wide configuration changes. No other persistence/privilege flags are set.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install tiger-trade - 安装完成后，直接呼叫该 Skill 的名称或使用
/tiger-trade触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.5
- Updated documentation in SKILL.md for clarity and consistency.
- Generalized some example instructions and removed restrictive notes about Hong Kong stocks.
- No changes to code—documentation only.
v1.0.4
- Updated instructions for checking stock prices to include both HK and US stocks (e.g., AAPL).
- Clarified that stock codes can be replaced with any stock symbol in the price check section.
- Removed the HK stocks example table from documentation for simplicity.
- Minor formatting and wording improvements in the setup and usage sections.
v1.0.3
- Added meta information file (_meta.json) for the skill.
- No changes to functionality or documentation beyond metadata update.
v1.0.2
- Added instructions for checking HK stock prices using the Tiger Broker website.
- Included a reference table with popular HK stock codes and names.
- Updated the quick trade example to demonstrate placing HK stock orders.
- No changes to code APIs or configuration requirements.
v1.0.1
- Updated config file path instructions to use a standard home directory location (`~/.tiger-config.json`).
- Simplified the quick trade script instructions and made the symbol entry generic for easier adaptation.
- Refined the description for clarity and removed specific stock examples for general US ETFs and HK stocks.
- Removed references to uncommon symbols and examples to keep documentation focused and relevant.
v1.0.0
Tiger Trade 1.0.0 initial release:
- Execute US and HK stock trades via Tiger Brokers API.
- Supports buying/selling stocks, managing portfolios, placing ETF/HK stock orders, and checking account balance.
- Requires a configuration file with necessary Tiger Brokers account credentials.
- Provides example code for placing trades and lists common stock/ETF symbols.
- Documentation includes available order types and trade actions.
元数据
常见问题
Tiger Trade 是什么？
Execute US and HK stock trades via Tiger Brokers API. Use when user wants to buy or sell stocks, manage investment portfolio, place orders for US ETFs or HK... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 655 次。
如何安装 Tiger Trade？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install tiger-trade」即可一键安装，无需额外配置。
Tiger Trade 是免费的吗？
是的，Tiger Trade 完全免费（开源免费），可自由下载、安装和使用。
Tiger Trade 支持哪些平台？
Tiger Trade 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Tiger Trade？
由 esanle（@esanle）开发并维护，当前版本 v1.0.5。
推荐 Skills