Trading Briefing

每日加密货币交易综合简报。当用户说"早报"、"简报"、"今天市场怎么样"、"交易情况"、"检查交易系统"、"系统状态"、"trading status"、"daily briefing"时触发。自动聚合：(1) BTC/ETH主流币价格 (2) 实盘机器人状态 (3) 持仓盈亏 (4) 系统健康 (5) 策略发现...

This skill's behavior mostly matches its description, but it implicitly reads files under /root/.openclaw/workspace/live_trading and backtest (state.json, trading.log, current_best.json, etc.). Those files may contain API keys, exchange credentials, or other sensitive trading data. SKILL.md also claims it will "reuse live_trading/config.json API keys" although the script does not explicitly load that file for ccxt — this mismatch is suspicious. Before installing, review the live_trading and backtest directories for secrets, consider running the skill in an isolated environment, and confirm whether you want a skill that reads other skills' state files. If you do proceed, audit any files the script will read (state.json, trading.log, config files) and ensure ccxt and network access are restricted as appropriate. If you want stricter guarantees, request the skill author to: (1) explicitly declare required config paths/credentials, (2) avoid hard-coded /root paths or make them configurable, and (3) document exactly what files are read and why.

Type: OpenClaw Skill Name: trading-briefing Version: 1.0.0 The skill bundle is a legitimate utility for aggregating cryptocurrency trading status and system health metrics. The script `scripts/briefing.py` uses standard system commands (df, free, pgrep) and the ccxt library to collect data, and it reads local state files from the expected workspace directory without any signs of data exfiltration or unauthorized execution.