optionwhales
v1.0.1Query real-time option flow intelligence and generate AI-powered trade analysis reports. Use when users ask about option flow, unusual options activity, inst...
⭐ 1· 315·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description (option flow + AI reports) match the included files and runtime instructions. The included scripts call api.optionwhales.io for flow data and a separate AI report service for report generation, which aligns with the stated two-capability design.
Instruction Scope
SKILL.md and the CLI scripts restrict actions to HTTP requests to the documented APIs and optionally reading a user-provided orders JSON file. The instructions do not ask the agent to read unrelated local files or arbitrary environment variables. Note: the AI report functionality uses a third-party host (ai-service-production-b44b.up.railway.app) — the SKILL.md/README document this, but it's an externally hosted service so confirm trust if you plan to use reports.
Install Mechanism
No install spec is provided; the skill is instruction-plus-scripts only and requires Python on PATH. No archives are downloaded and the Python scripts use only the standard library, so there is low install-time risk.
Credentials
The declared required credential is OPTIONWHALES_API_KEY — appropriate and proportional for calling the OptionWhales API. An AI_API_TOKEN is referenced and used by scripts/README/SKILL.md but is optional; it is not listed as a required env var in registry metadata. Treat AI_API_TOKEN as sensitive and only provide it if you trust the external AI report service.
Persistence & Privilege
The skill does not request always: true and does not attempt to modify other skills or system settings. It only provides CLI helpers and runtime instructions, so persistence/privilege concerns are minimal.
Assessment
This skill appears to do what it claims: it uses OPTIONWHALES_API_KEY to query OptionWhales APIs and optionally accepts an AI_API_TOKEN to call a separate AI report service. Before installing:
- Only provide OPTIONWHALES_API_KEY (required) and supply AI_API_TOKEN only if you trust the external report service (ai-service-production-b44b.up.railway.app). Verify that host is an official OptionWhales service or otherwise trustworthy.
- Inspect any orders JSON you pass to the scripts; the scripts will upload its contents to the report/eligibility endpoints.
- Don’t give the skill unrelated cloud or system credentials (no other env vars are required).
- Because the skill can be invoked autonomously by agents (normal default), consider limiting agent autonomy or auditing skill use if you are concerned about an LLM calling external services with your keys.
If you need more assurance, ask the publisher for a statement (or docs) that the AI report service is operated by OptionWhales and confirm the token scopes/retention policy.Like a lobster shell, security has layers — review code before you run it.
latestvk97455b2qwhtw074esqkby95dx83nhmx
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🐋 Clawdis
Any binpython3, python
EnvOPTIONWHALES_API_KEY
Primary envOPTIONWHALES_API_KEY