ClawHub

VibeTrader

v1.0.2

Create and manage AI-powered trading bots via natural language. Paper & live trading, portfolio monitoring, backtesting, stock quotes, and options chains.

⭐ 1· 2k·1 current·1 all-time
byEthan Barsketis@etbars
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (AI trading bots) match the declared requirement (VIBETRADER_API_KEY) and the SKILL.md endpoints for bot/portfolio/trading operations. No unrelated credentials, binaries, or system access are requested.
ℹ
Instruction Scope
SKILL.md instructs the agent to call a remote REST API and MCP server (both hosted under a Google Cloud Run URL) and to use the VIBETRADER_API_KEY via Authorization header. It also tells users where to set the env var in the OpenClaw config (~/.openclaw/openclaw.json). The instructions do not ask the agent to read other local files, secrets, or system state.
✓
Install Mechanism
No install specification or code is included (instruction-only). Nothing will be downloaded or written to disk by an installer in this package.
✓
Credentials
Only a single service-specific API key (VIBETRADER_API_KEY) is required, which is proportionate for a cloud-managed trading service. No other secret or unrelated env vars are requested.
✓
Persistence & Privilege
The skill is not marked always:true and uses the platform's default autonomous-invocation setting. It does not request elevated or persistent system privileges or attempt to modify other skills.
Assessment
This skill appears coherent, but treat any third-party trading API key as sensitive: (1) verify the vendor (vibetrader.markets) and TLS certificate before using your real account; (2) prefer paper mode first and test actions; (3) review how the vendor links broker accounts (Alpaca) and what permissions the API key grants; (4) consider creating a limited-scope key or rotating it after use; and (5) if you have strict security policies, confirm the cloud-run endpoint and privacy/terms on vibetrader.markets/docs before enabling live trading.

Like a lobster shell, security has layers — review code before you run it.

latestvk97evjt2e7q0bskjjz83m3msr180hzp3

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

EnvVIBETRADER_API_KEY

Comments