← Back to Skills Marketplace
93
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install trading-coagent-vic
Description
AI協助監控並修復交易腳本缺漏，主動執行和補救加密貨幣及股票自動交易，持續優化交易效能。
Usage Guidance
This skill is internally inconsistent: it promises autonomous execution and repair of live trades but does not declare how it will obtain the sensitive credentials or config it needs. Before installing or enabling it consider: 1) Do not supply private keys or exchange API credentials until you inspect and approve where/how they are stored; prefer hardware wallets or exchange API keys with tightly scoped permissions. 2) Review and harden config.json usage: place credentials in a secure secrets manager and do not keep plaintext keys in repo. 3) Require explicit manual approval for any real-money trade (disable autonomous invocation or add confirmation steps). 4) Audit the code paths that would sign/send transactions and any code that edits other scripts. 5) If you plan to run it, run in a sandboxed environment with limited credentials and test thoroughly in simulation before granting live-trading access. If you want, provide the missing information (where credentials/config are expected and how script updates are applied) and I can re-evaluate.
Capability Analysis
Type: OpenClaw Skill
Name: trading-coagent-vic
Version: 1.0.0
The skill bundle defines an autonomous trading 'co-agent' that is explicitly instructed in SKILL.md to execute live financial transactions and self-modify its own trading scripts to 'fix' errors. While the provided Python script (scripts/monitor-signals.py) is mostly boilerplate and lacks functional trade execution or exfiltration logic, the high-privilege instructions for the AI to autonomously edit code and manage assets represent a significant security risk. This capability for self-modifying code and autonomous financial action is classified as suspicious due to the potential for unintended harm or exploitation, despite the lack of clear malicious intent or hidden backdoors.
Capability Assessment
Purpose & Capability
The skill's stated purpose is autonomous execution and remediation of live crypto/stock trades, but the package declares no required environment variables, no primary credential, and no required config paths. The included script expects a config.json (rpc_endpoints, tokens_to_monitor, trading_params, risk_limits) and the runtime behavior implies wallet/private-key or exchange API access for signing/sending transactions—none of which are declared or explained. This mismatch is disproportionate and incoherent with the stated capability.
Instruction Scope
SKILL.md directs the agent to run a 5-minute monitoring loop, 'actively execute trades', 'repair scripts', re-run failed trades, and perform emergency remediation. These instructions permit reading/writing logs, accessing configuration, editing/fixing scripts, and sending transactions. The instructions are broad and vague (e.g., '修復腳本', '做出決策並執行') and grant the agent wide discretion without explicit guardrails or limits, which is scope creep for a typical monitoring/helper skill.
Install Mechanism
There is no install specification (instruction-only plus a small Python script). Nothing is downloaded or installed by the registry spec, which minimizes supply-chain risk. The provided Python script is local and readable.
Credentials
Executing real trades would normally require sensitive secrets (wallet private keys or exchange API keys) and network credentials (RPC endpoints). The skill requests none of these in metadata; the script implicitly relies on a local config.json but no config path was declared. This under-declaration is a red flag: the skill either omits required sensitive inputs (poor design) or expects users to place secrets in unspecified locations (risky).
Persistence & Privilege
always is false (good), but model invocation is enabled (default), which means the agent could autonomously act on the broad trade-and-fix instructions. Combined with the vague instructions to modify scripts and perform live trades, autonomous invocation increases potential impact if credentials are provided or stored insecurely. The skill does not document user confirmation/approval steps for real trades.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install trading-coagent-vic - After installation, invoke the skill by name or use
/trading-coagent-vic - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
trading-coagent-vic 1.0.0 Changelog
- Initial release of the trading-coagent skill.
- Enables AI to collaborate with trading scripts by monitoring signals every 5 minutes.
- AI supplements missed signals, repairs failed or erroneous trades, and can proactively execute trades when appropriate.
- Continuous script analysis and optimization loop provided.
- Features detailed decision process, rescue protocols, logging templates, and checklists for crypto/stock automation use cases.
Metadata
Frequently Asked Questions
What is Trading Co-Agent Pro?
AI協助監控並修復交易腳本缺漏，主動執行和補救加密貨幣及股票自動交易，持續優化交易效能。 It is an AI Agent Skill for Claude Code / OpenClaw, with 93 downloads so far.
How do I install Trading Co-Agent Pro?
Run "/install trading-coagent-vic" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Trading Co-Agent Pro free?
Yes, Trading Co-Agent Pro is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Trading Co-Agent Pro support?
Trading Co-Agent Pro is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Trading Co-Agent Pro?
It is built and maintained by chungvic (@chungvic); the current version is v1.0.0.
More Skills