Trade Signal
v1.0.6Real-time trade signals with executable Buy/Sell/Hold recommendations for stocks. Use when asked about trading decisions, stock analysis, technicals, buy/sell calls, earnings plays, price targets, analyst ratings, entry/exit points, portfolio rebalancing, or any investment decision requiring actionable intelligence. Supports US + Global markets, Asia emerging markets, individual stocks, ETFs, and options strategies.
⭐ 11· 3k·2 current·2 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
Name and description match the code and instructions: the skill queries a third‑party service (https://app.terminal-x.ai/api) to produce trade signals. That behavior is consistent with a trading-signal service. However the SKILL metadata declares no required binaries or credentials, while the included script actually relies on python3 and curl being present — a minor inconsistency between declared requirements and actual runtime needs.
Instruction Scope
The runtime instructions and sample script send the full user query to a remote endpoint (GET https://app.terminal-x.ai/api/lite-search?query=...). The instructions do not read local files or environment beyond that, but they do cause outbound network transmission of whatever text the user or agent supplies — including potentially sensitive portfolio, PII, or account information. There is no guidance in SKILL.md about consent, retention, or data handling by the remote service.
Install Mechanism
No install spec; skill is instruction-only with a small helper script. Nothing is downloaded or written to disk by an installer. This is low-risk from an install perspective.
Credentials
The skill declares no required environment variables or credentials. That is plausible if the remote API is publicly queryable, but the SKILL.md advertises access to paid/proprietary data sources (Bloomberg, Goldman, etc.) — which raises the question of how those sources are licensed/authorized. Also the script requires python3 and curl even though the registry lists no required binaries.
Persistence & Privilege
The skill does not request permanent/always-on inclusion, does not modify other skills, and has no install-time persistence. It runs only when invoked.
What to consider before installing
This skill will send the exact text of your queries to https://app.terminal-x.ai/api. Before installing or using it: (1) Confirm you trust Terminal‑X and review their privacy/retention policy and terms (do they store queries, use them for training, or share with third parties?). (2) Don’t send sensitive data (account numbers, private portfolio holdings, PII) in queries. (3) Ensure the agent environment has python3 and curl (the registry metadata omitted those requirements). (4) If you need guaranteed paid-data coverage or compliance (Bloomberg/Goldman content), ask the vendor how those sources are licensed and whether an API key is required. (5) For higher assurance, run sample queries that are non-sensitive and monitor outgoing traffic (or sandbox the agent) to verify what is transmitted.Like a lobster shell, security has layers — review code before you run it.
financevk97e70qhxtsdv32rh0j9ayjkjd80d5j2investingvk97e70qhxtsdv32rh0j9ayjkjd80d5j2latestvk97e70qhxtsdv32rh0j9ayjkjd80d5j2stocksvk97e70qhxtsdv32rh0j9ayjkjd80d5j2tradingvk97e70qhxtsdv32rh0j9ayjkjd80d5j2
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
