Trade History

Read and display recent trade history from local JSONL log file. Use when asked about past trades, trade recap, performance review, or to list recorded signals.

Do not run this skill until you verify the referenced Python script and the log path. Specifically: (1) Inspect the file ~/.npm-global/lib/node_modules/openclaw/skills/trade-history/read.py — do not execute it if you cannot review its contents; (2) Confirm or change the hard-coded log path (/home/windows_11/...) to a location you control, or require the skill accept a user-specified path; (3) Prefer a skill that includes its small read script in the package so you can review the code before execution; (4) If you must run it, run the script in a safe environment (non-production account, limited filesystem permissions) and back up the trades.jsonl file first. The main concerns are the missing script (unknown behavior) and the hard-coded absolute path that may read unexpected files.

Type: OpenClaw Skill Name: trade-history Version: 1.0.0 The skill is designed to read and display local trade history from a `trades.jsonl` file. The `SKILL.md` instructs the agent to execute a local Python script (`read.py`) with optional JSON arguments. There are no instructions for data exfiltration, unauthorized network calls, persistence, or any other malicious activity. Crucially, the 'Guardrails' section explicitly states, 'Never delete or modify the log file — read only,' indicating a clear intent for benign, read-only operation. While the `read.py` script itself (not provided) could potentially contain vulnerabilities, the instructions given to the agent in `SKILL.md` do not demonstrate malicious intent or prompt injection to achieve harmful objectives.