← 返回 Skills 市场
93
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install trading-coagent-vic
功能描述
AI協助監控並修復交易腳本缺漏，主動執行和補救加密貨幣及股票自動交易，持續優化交易效能。
安全使用建议
This skill is internally inconsistent: it promises autonomous execution and repair of live trades but does not declare how it will obtain the sensitive credentials or config it needs. Before installing or enabling it consider: 1) Do not supply private keys or exchange API credentials until you inspect and approve where/how they are stored; prefer hardware wallets or exchange API keys with tightly scoped permissions. 2) Review and harden config.json usage: place credentials in a secure secrets manager and do not keep plaintext keys in repo. 3) Require explicit manual approval for any real-money trade (disable autonomous invocation or add confirmation steps). 4) Audit the code paths that would sign/send transactions and any code that edits other scripts. 5) If you plan to run it, run in a sandboxed environment with limited credentials and test thoroughly in simulation before granting live-trading access. If you want, provide the missing information (where credentials/config are expected and how script updates are applied) and I can re-evaluate.
功能分析
Type: OpenClaw Skill
Name: trading-coagent-vic
Version: 1.0.0
The skill bundle defines an autonomous trading 'co-agent' that is explicitly instructed in SKILL.md to execute live financial transactions and self-modify its own trading scripts to 'fix' errors. While the provided Python script (scripts/monitor-signals.py) is mostly boilerplate and lacks functional trade execution or exfiltration logic, the high-privilege instructions for the AI to autonomously edit code and manage assets represent a significant security risk. This capability for self-modifying code and autonomous financial action is classified as suspicious due to the potential for unintended harm or exploitation, despite the lack of clear malicious intent or hidden backdoors.
能力评估
Purpose & Capability
The skill's stated purpose is autonomous execution and remediation of live crypto/stock trades, but the package declares no required environment variables, no primary credential, and no required config paths. The included script expects a config.json (rpc_endpoints, tokens_to_monitor, trading_params, risk_limits) and the runtime behavior implies wallet/private-key or exchange API access for signing/sending transactions—none of which are declared or explained. This mismatch is disproportionate and incoherent with the stated capability.
Instruction Scope
SKILL.md directs the agent to run a 5-minute monitoring loop, 'actively execute trades', 'repair scripts', re-run failed trades, and perform emergency remediation. These instructions permit reading/writing logs, accessing configuration, editing/fixing scripts, and sending transactions. The instructions are broad and vague (e.g., '修復腳本', '做出決策並執行') and grant the agent wide discretion without explicit guardrails or limits, which is scope creep for a typical monitoring/helper skill.
Install Mechanism
There is no install specification (instruction-only plus a small Python script). Nothing is downloaded or installed by the registry spec, which minimizes supply-chain risk. The provided Python script is local and readable.
Credentials
Executing real trades would normally require sensitive secrets (wallet private keys or exchange API keys) and network credentials (RPC endpoints). The skill requests none of these in metadata; the script implicitly relies on a local config.json but no config path was declared. This under-declaration is a red flag: the skill either omits required sensitive inputs (poor design) or expects users to place secrets in unspecified locations (risky).
Persistence & Privilege
always is false (good), but model invocation is enabled (default), which means the agent could autonomously act on the broad trade-and-fix instructions. Combined with the vague instructions to modify scripts and perform live trades, autonomous invocation increases potential impact if credentials are provided or stored insecurely. The skill does not document user confirmation/approval steps for real trades.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install trading-coagent-vic - 安装完成后，直接呼叫该 Skill 的名称或使用
/trading-coagent-vic触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
trading-coagent-vic 1.0.0 Changelog
- Initial release of the trading-coagent skill.
- Enables AI to collaborate with trading scripts by monitoring signals every 5 minutes.
- AI supplements missed signals, repairs failed or erroneous trades, and can proactively execute trades when appropriate.
- Continuous script analysis and optimization loop provided.
- Features detailed decision process, rescue protocols, logging templates, and checklists for crypto/stock automation use cases.
元数据
常见问题
Trading Co-Agent Pro 是什么？
AI協助監控並修復交易腳本缺漏，主動執行和補救加密貨幣及股票自動交易，持續優化交易效能。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 93 次。
如何安装 Trading Co-Agent Pro？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install trading-coagent-vic」即可一键安装，无需额外配置。
Trading Co-Agent Pro 是免费的吗？
是的，Trading Co-Agent Pro 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Trading Co-Agent Pro 支持哪些平台？
Trading Co-Agent Pro 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Trading Co-Agent Pro？
由 chungvic（@chungvic）开发并维护，当前版本 v1.0.0。
推荐 Skills