← 返回 Skills 市场
867
总下载
0
收藏
2
当前安装
11
版本数
在 OpenClaw 中安装
/install xerolite
功能描述
Integrate OpenClaw with Xerolite - IBKR. Use when: querying Xerolite API, placing orders, searching contracts, fetching portfolio.
安全使用建议
This skill appears to do exactly what it claims: send orders and queries to a Xerolite agent via HTTP using XEROLITE_AGENTIC_API_KEY. Before installing: 1) Only provide a dedicated API key with minimal permissions (prefer a paper/trading-limited key if available). 2) Verify and set XEROLITE_API_URL to your trusted Xerolite host (do not leave it pointing at an unknown public URL). 3) Be aware verbose logging will show partial API-key fragments (avoid enabling in shared logs). 4) Because the skill can place real trades and the agent may invoke it autonomously, consider disabling autonomous agent actions for trading or require explicit confirmations. 5) Test against a local/paper environment first to confirm behavior.
功能分析
Type: OpenClaw Skill
Name: xerolite
Version: 0.1.4
The xerolite skill is a legitimate integration bridge between OpenClaw and the Xerolite/Interactive Brokers trading platform. The core logic in `scripts/xerolite.mjs` uses standard Node.js fetch calls to interact with a user-defined or local API endpoint for trading operations. It includes security-conscious practices such as masking API keys in verbose logs and lacks any indicators of data exfiltration, malicious execution, or prompt injection.
能力标签
能力评估
Purpose & Capability
Name/description (Xerolite bridge to IBKR) matches the files and runtime behavior: the CLI sends POST requests to Xerolite agentic endpoints to place orders, search contracts, and get portfolio. Required binary (node) and required env var (XEROLITE_AGENTIC_API_KEY) are appropriate for this purpose.
Instruction Scope
SKILL.md and the CLI script limit actions to constructing JSON bodies and POSTing to the documented /api/agentic/* endpoints. The instructions don't read unrelated files or request other credentials. Network calls to the configured Xerolite base URL are expected for this functionality.
Install Mechanism
This is an instruction-only skill with an included Node CLI file; there is no install spec or remote download. Nothing is written to disk by an installer step, so install risk is low.
Credentials
Only one required secret (XEROLITE_AGENTIC_API_KEY) is requested, which is proportional. Minor notes: XEROLITE_API_URL can point to any host (defaults to http://localhost) — if set to a malicious URL the API key and requests could be sent elsewhere. Verbose logging masks the key but reveals first/last characters, which could leak in shared logs. Consider restricting the API key scope and carefully configuring XEROLITE_API_URL.
Persistence & Privilege
always:false (no force-install) and the skill is user-invocable. Model invocation is not disabled, so the agent could call the skill autonomously. This is expected for skills but increases impact because the skill can place trades; consider requiring explicit user confirmation or limiting agent autonomy for trading actions.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install xerolite - 安装完成后，直接呼叫该 Skill 的名称或使用
/xerolite触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.4
- No user-facing changes in this version.
- SKILL.md updated with minor formatting and wording tweaks.
- No changes to code, commands, or functionality.
v0.1.3
**Added API key support and portfolio retrieval to Xerolite skill.**
- Now requires API key for all agentic (authenticated) endpoints (`XEROLITE_AGENTIC_API_KEY` or `--api-key`).
- Added new command to fetch portfolio/positions from Xerolite platform.
- Updated endpoints to use `/api/agentic/*` paths and send API key in the `X-Agentic-Api-Key` header.
- Removed legacy metadata file (`_meta.json`).
v0.1.2
xerolite 0.1.2
- Added _meta.json to define skill metadata.
- Updated SKILL.md: streamlined description, clarified setup and purpose, and made documentation more concise.
- No functional or interface changes to commands or API usage.
v0.1.1
- Improved description to clarify Xerolite is a TradingView-to-Interactive Brokers bridge and highlight its automation focus.
- Added direct links and more context for Xerolite, Interactive Brokers, and TradingView.
- Emphasized skill use cases (order placement, contract search) and integration with OpenClaw agents.
- No changes to features, code, commands, or API usage.
- Documentation is now clearer for new users and provides better onboarding context.
v0.1.0
Update Version to 0.1.0
v0.0.5
- Removed mention of processing Xerolite webhooks from the skill description.
- No functional or structural changes; documentation update only.
v0.0.4
- Removed webhook and transform functionality; skill now only supports placing orders and contract search via the Xerolite REST API.
- Deleted install/uninstall scripts, transform module, and webhook documentation.
- Refined documentation to reflect simplified feature set and updated package structure.
- Webhook event handling, notification formatting, and related troubleshooting details are no longer included.
v0.0.3
- BREAKING: Environment variable and endpoint changes; see below for details.
- Dropped requirement for XEROLITE_API_KEY and XEROLITE_API_URL environment variables.
- Now uses internal OpenClaw API endpoints (`/api/internal/agent/...`) instead of `/api/agent/...`.
- API key is no longer used; XEROLITE_API_URL is now optional (defaults to `http://localhost`).
- Metadata updated to remove unneeded environment variable requirements.
- Simplified requirements and environment setup; updated documentation to reflect changes.
v0.0.2
- Added OpenClaw-compatible metadata to SKILL.md, declaring required binaries and environment variables.
- No functional or structural changes to the code or scripts.
- The skill now clearly specifies its dependencies for improved interoperability with OpenClaw.
v0.0.1
Initial release of xerolite skill. Xerolite functions as a bridge software that routes TradingView signals to IBKR (Interactive Brokers) via webhook connectivity. Powered by Xeroflex, enabling signal-to-execution automation.
- Integrates OpenClaw with the Xerolite trading platform.
- Place orders and search contracts via Xerolite REST API.
- Receive and process Xerolite webhooks at /hooks/xerolite, transforming them into readable notifications.
- Installation and removal scripts included for easy setup.
- CLI and transform module provided to interact with orders, contracts, and webhook payloads.
v1.0.0
Initial release of Xerolite skill: Xerolite functions as a bridge software that routes TradingView signals to IBKR (Interactive Brokers) via webhook connectivity. Powered by Xeroflex, enabling signal-to-execution automation.
- Place orders and search contracts on Xerolite to IBKR (Interactive Brokers) TWS via easy command-line scripts.
- Receive and format Xerolite webhook notifications in OpenClaw.
- Simple install/uninstall scripts for setup and removal.
- Includes a transform module to format webhook payloads into readable notifications.
- Requires `XEROLITE_API_URL`, `XEROLITE_API_KEY` environment variables.
元数据
常见问题
Xerolite 是什么？
Integrate OpenClaw with Xerolite - IBKR. Use when: querying Xerolite API, placing orders, searching contracts, fetching portfolio. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 867 次。
如何安装 Xerolite？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install xerolite」即可一键安装，无需额外配置。
Xerolite 是免费的吗？
是的，Xerolite 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Xerolite 支持哪些平台？
Xerolite 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Xerolite？
由 xeroflex（@xero-flex）开发并维护，当前版本 v0.1.4。
推荐 Skills