vibetrading-global-signals

Query AI-generated trading signals from vibetrading-datahub. Signals are produced by autonomous agents analyzing whale activity, news, funding rates, and technical indicators.

Security Scan

The skill appears to do what it claims (fetch trading signals from vibetrading.dev), but there are incoherent/incomplete pieces (required binaries vs actual runtime, open API claim, and the lack of an install spec) that warrant caution before installing or using it.

Purpose & Capability

The skill description and scripts all target the vibetrading.dev API and only need network access to query JSON signals. However the SKILL.md metadata declares required binaries: curl and jq, while the provided scripts are Node.js programs (package.json requires node >=18 and scripts use axios). Node (and npm) are not listed as required; curl/jq are only used in documentation examples. This mismatch is disproportionate and likely a packaging/documentation error.

Instruction Scope

SKILL.md instructs the agent/user to run the included node scripts and shares curl examples that query https://vibetrading.dev/api/v1. The runtime instructions do not ask the agent to read local secrets, other config paths, or to send data to unexpected endpoints. They do suggest scheduling cron jobs and running npm install (README), which are normal but increase persistence of network queries if the user enables them. The SKILL.md's claim that 'No authentication required' is unconventional for trading/data APIs and should be independently verified.

Install Mechanism

This is instruction-only (no platform install spec), but packaged files include package.json and package-lock.json with dependencies (axios, https-proxy-agent, and transitive packages) pulled from the public npm registry. That is normal and traceable, but running npm install will fetch those packages (supply-chain risk). There are no downloads from arbitrary URLs or extract steps in the skill metadata. Because there is no formal install spec, the installation step relies on the user/agent running npm install manually.

Credentials

The skill declares no required environment variables or credentials and the scripts do not access any local environment secrets. That is proportionate to the stated purpose (public API queries). One caveat: the SKILL.md states the API is 'open' (no token required) after a domain change; you should verify that claim and confirm you trust vibetrading.dev before allowing periodic automated requests.

Persistence & Privilege

always is false and the skill does not request any elevated or persistent platform privileges. It suggests cron scheduling as an optional user action, which is normal for monitoring scripts. The skill does not modify other skills or agent configuration.

What to consider before installing

Key things to check before installing or running this skill: - Verify the endpoint ownership and trustworthiness of https://vibetrading.dev (the changelog notes a domain move from datahub-prd.fmcp.xyz). Ensure you are comfortable sending queries to that domain. - Be aware npm install will pull packages from the public npm registry (axios, https-proxy-agent and many transitive deps). Consider running npm audit, reviewing package-lock.json, and installing in an isolated environment (container or VM) if you’re concerned about supply-chain risk. - The SKILL.md/metadata mismatch: the skill lists curl and jq as required, but the runtime is Node.js. Make sure Node >=18 is available before running the scripts. - The skill claims the API is open (no token). That is plausible but unusual for a signals/data API — confirm the API really requires no auth and has acceptable rate limits and privacy practices. - If you will schedule cron/automated runs, limit frequency to avoid accidental rate limits or unexpected data exfil (keep it local, don’t forward raw responses to third parties). If you want a higher-confidence assessment, provide: (1) confirmation of who operates vibetrading.dev or an official homepage; (2) the exact environment where you plan to run the skill (so I can advise about isolation); or (3) a copy of the API responses (sample JSON) so I can verify the scripts’ assumptions and check for unexpected data fields or callbacks.

Query AI-generated trading signals from vibetrading-datahub. Signals are produced by autonomous agents analyzing whale activity, news, funding rates, and technical indicators.

Setup

No authentication required! The API is now open and accessible without any API token.

Simply run the scripts directly:

API Endpoints

1. Get Latest Signals (Multi-Symbol)

Fetch latest signals for multiple symbols, grouped by symbol.

Example Usage:

# Get latest signals for BTC and ETH, all types
curl 'https://vibetrading.dev/api/v1/signals/latest?symbols=BTC,ETH'

# Get only whale and news signals from last 24h
curl 'https://vibetrading.dev/api/v1/signals/latest?symbols=BTC,ETH,SOL&signal_types=WHALE_ACTIVITY,NEWS_ANALYSIS&hours=24'

2. Get Signals by Symbol

Fetch signals for a single symbol.

Example Usage:

curl 'https://vibetrading.dev/api/v1/signals/BTC?signal_types=TECHNICAL_INDICATOR&limit=5&hours=48'

3. Get Signals by Symbol and Type

Fetch signals for a specific symbol and signal type combination.

Example Usage:

curl 'https://vibetrading.dev/api/v1/signals/ETH/FUNDING_RATE?limit=3'

Signal Types

signal_type	Description
WHALE_ACTIVITY	Whale wallet movement analysis
NEWS_ANALYSIS	Crypto news sentiment
FUNDING_RATE	Perpetual funding rate signals
TECHNICAL_INDICATOR	Multi-timeframe technical analysis

Workflow

1. Query Signals

Use the provided scripts to query signals:

• scripts/get_latest_signals.js - Get latest signals for multiple symbols
• scripts/get_signals_by_symbol.js - Get signals for a specific symbol
• scripts/get_signals_by_type.js - Get signals by symbol and type

3. Analyze Results

Review the signal payloads for:

• Sentiment: BULLISH, BEARISH, or NEUTRAL
• Analysis: Detailed markdown analysis
• Timestamp: When the analysis was performed

4. Schedule Monitoring

Set up cron jobs for regular signal monitoring:

# Example: Check BTC/ETH signals every hour
0 * * * * /path/to/scripts/get_latest_signals.js BTC,ETH

Scripts

• scripts/get_latest_signals.js - Query latest signals for multiple symbols
• scripts/get_signals_by_symbol.js - Query signals for a single symbol
• scripts/get_signals_by_type.js - Query signals by symbol and type

Examples

Quick Signal Check

# Check BTC signals
node scripts/get_signals_by_symbol.js BTC

# Check latest BTC and ETH signals
node scripts/get_latest_signals.js BTC,ETH

# Check ETH funding rate signals
node scripts/get_signals_by_type.js ETH FUNDING_RATE

Advanced Filtering

# Get whale activity signals from last 48 hours
node scripts/get_latest_signals.js BTC,ETH,SOL WHALE_ACTIVITY 48

# Get multiple signal types
node scripts/get_latest_signals.js BTC "WHALE_ACTIVITY,NEWS_ANALYSIS" 24

Response Format

All API responses include:

• symbols: Array of symbols queried
• signals: Object with signals grouped by symbol
• metadata: Query metadata (time window, signal types, etc.)

Each signal contains:

• id: Unique signal ID
• symbol: Trading symbol
• signal_type: Type of signal
• author: Agent that generated the signal
• signal_payload: Detailed analysis with sentiment and markdown
• created_at: Timestamp

Integration with Trading Strategies

Use these signals to:

1. Confirm trade ideas with AI-generated analysis
2. Monitor market sentiment across multiple dimensions
3. Set alerts for specific signal types
4. Combine with other data for comprehensive analysis

Troubleshooting

Common Issues:

1. 404 Not Found: No signals available for the query parameters
2. Rate limiting: API may have rate limits, adjust query frequency
3. Network issues: Check your internet connection

Debug Commands:

# Test API connectivity
curl 'https://vibetrading.dev/api/v1/signals/latest?symbols=BTC' -v

# Simple ping test
curl -I 'https://vibetrading.dev/api/v1/signals/latest?symbols=BTC'

Notes

• API responses are cached for performance
• Signal timestamps are in UTC
• Always verify signals with other data sources
• Use appropriate risk management with any trading decisions