← 返回 Skills 市场
Vincent - Trading Engine
作者
Chris Cassano
· GitHub ↗
· v1.0.69
· MIT-0
604
总下载
0
收藏
4
当前安装
10
版本数
在 OpenClaw 中安装
/install vincent-trading-engine
功能描述
Strategy-driven automated trading for Polymarket and HyperLiquid. Use this skill when users want to create trading strategies, set stop-loss/take-profit/trai...
安全使用建议
This skill has inconsistencies you should resolve before installing. Specifically: (1) Ask the author to explain why local agentwallet files are required if all private keys and LLM keys are said to remain on Vincent's servers — what exactly is stored in those paths? (2) Treat the allowed use of npx:@vincentai/cli* as equivalent to installing and executing remote code — review the @vincentai/cli package source, versions, and npm publisher, and prefer pinned versions or a vetted install mechanism. (3) Confirm what files the skill will read/write and whether it will transmit wallet contents or other local data to external services. (4) If you must use it, run the agent in a restricted sandbox, limit its filesystem access to only the minimal required path, and monitor network calls. If the maintainer cannot justify the local wallet requirement and the runtime npx behavior, avoid enabling the skill.
功能分析
Type: OpenClaw Skill
Name: vincent-trading-engine
Version: 1.0.69
The Vincent Trading Engine skill bundle provides automated trading capabilities for Polymarket and HyperLiquid by wrapping the `@vincentai/cli` package. It requires access to sensitive wallet credentials (`agentwallet`) and utilizes shell execution (`Bash`) to perform financial transactions and manage trading strategies. While the functionality is extensively documented and aligned with its stated purpose, the combination of credential access, automated trading, and reliance on an external CLI fetched via `npx @latest` represents a high-risk profile. A minor anomaly is noted in `_meta.json` where the `publishedAt` date is set in February 2026, though no clear evidence of intentional malice or data exfiltration was found.
能力评估
Purpose & Capability
The skill claims to route trades through the Vincent backend and that private keys/LLM keys never leave the server, yet the declared required config paths explicitly point to local agent wallet files (${OPENCLAW_STATE_DIR:-$HOME/.openclaw}/credentials/agentwallet and ./agentwallet). It's unclear why a trading engine that uses a backend service would need local wallet files; this is an unexplained privilege request.
Instruction Scope
SKILL.md allows the agent to run Bash via npx:@vincentai/cli* and also grants Read/Write tools. Running npx will download and execute a package from npm at runtime — effectively executing remote code. The instructions also reference ingesting wide-ranging external data (web, Twitter, RSS, on-chain) and using local agentwallet config; the combination broadens what the agent may read, act on, or transmit beyond the stated minimal purpose.
Install Mechanism
There is no explicit install spec, but allowed-tools include npx:@vincentai/cli*. npx implicitly fetches code from the npm registry and runs it locally. That is equivalent to an install-from-remote and carries the higher risks called out in the guidance (remote package execution).
Credentials
No environment variables are required, but two required config paths point to an 'agentwallet' file. If that file contains private keys or wallet credentials, the skill would have access to sensitive secrets not justified by the description (which said private keys remain on Vincent servers). The mismatch between 'no private keys' claim and required local wallet paths is disproportionate and unexplained.
Persistence & Privilege
always:false (good). However, the skill requests access to local credential paths and can run remote-installed CLI tools, which is a meaningful runtime privilege even without permanent installation. The skill does not request system-wide persistence, but reading/writing an agent wallet is a high-sensitivity action.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install vincent-trading-engine - 安装完成后，直接呼叫该 Skill 的名称或使用
/vincent-trading-engine触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.69
- Added HyperLiquid perpetuals and spot trading support alongside Polymarket.
- Updated architecture and API/key usage for venue-specific routing and security.
- CLI examples and documentation revised to include HyperLiquid as a supported venue.
- Security model and trade enforcement updated for multi-venue, using skill-based adapters.
v1.0.68
No changes detected in this version.
- No updates or modifications have been made to the skill files or documentation.
- Functionality and usage remain unchanged from the previous release.
v1.0.66
No changes detected in this release.
- Version bumped to 1.0.66 with no file or documentation changes.
- No new features, fixes, or updates in this release.
v1.0.65
- Updated allowed CLI tools to support only Bash commands with npx:@vincentai/cli* for greater security and compatibility.
- No functional or API changes; documentation has been updated to reflect the tool constraint.
v1.0.64
- Major update: Introduced signal pipeline and structured config for LLM-powered strategies.
- Strategies now use weighted drivers, escalation policies, and a 6-layer signal pipeline.
- Added support for structured thesis, instruments, entry/exit rules, and auto-actions in strategy config.
- CLI usage for creating strategies now requires full JSON config, enabling flexible and advanced setups.
- Documentation explains new concepts: instrument, thesis, driver, signal scoring, escalation, and batching.
- Standalone stop-loss, take-profit, and trailing stop rules are unchanged.
v1.0.63
No changes detected in this version.
- Version 1.0.63 was released with no file changes compared to the previous version.
- No user-facing or backend updates were made in this update.
v1.0.62
- Documentation (SKILL.md) updated; no functional or code changes.
- File truncate/incomplete at the end of the Newswire Monitors section remains; no new content was added.
- Version remains at 1.0.0 in metadata.
v1.0.61
- Added a standardized YAML front matter to SKILL.md with metadata including name, description, author, version, and integration requirements.
- Improved skill discoverability with new trigger phrases and descriptions for agent systems.
- No changes to command usage or strategy logic—CLI instructions, security model, and architectural details are unchanged.
- Documentation now clearly identifies configuration dependencies (e.g., agentwallet credential requirements).
- Updated version metadata to 1.0.0 in YAML (note: this does not affect the CLI or backend code versioning).
v1.0.60
No file changes detected in this version.
- No updates or modifications were made to the skill in this release.
- Documentation, features, and behavior remain unchanged from the previous version.
v1.0.0
Vincent Trading Engine 1.0.0 – Initial Release
- Launches the Vincent Trading Engine for automated Polymarket trading using data monitoring and LLM-powered decisions.
- Supports strategy lifecycle management: create, activate, pause, resume, archive, and duplicate strategies.
- Integrates data monitors: Brave web search, Twitter, newswire (Finnhub), and price feeds to trigger actions.
- Enables both LLM-powered trading/alerting and standalone stop-loss, take-profit, and trailing stop rules (no LLM needed).
- Implements strong security controls: enforced limits, audit trail, no private keys or direct LLM access.
- All usage metered; provides cost tracking and detailed LLM invocation history per strategy.
元数据
常见问题
Vincent - Trading Engine 是什么？
Strategy-driven automated trading for Polymarket and HyperLiquid. Use this skill when users want to create trading strategies, set stop-loss/take-profit/trai... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 604 次。
如何安装 Vincent - Trading Engine？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install vincent-trading-engine」即可一键安装，无需额外配置。
Vincent - Trading Engine 是免费的吗？
是的，Vincent - Trading Engine 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Vincent - Trading Engine 支持哪些平台？
Vincent - Trading Engine 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Vincent - Trading Engine？
由 Chris Cassano（@glitch003）开发并维护，当前版本 v1.0.69。
推荐 Skills