ClawHub

x-trading

v1.0.0

Trade security tokens on the X platform — check balances, place orders, view market data, and review trade history.

⭐ 0· 68·0 current·0 all-time
bysss3000@seineruo
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (trade security tokens on X) match the requested capability: the SKILL.md declares a single X_TRADING_API_KEY and all modules are trading/account/market endpoints consistent with that purpose.
ℹ
Instruction Scope
Instructions are scoped to calling the X trading API and include safety rules (explicit user confirmation before POST /orders, large-order warning). Minor presentation issues (a malformed HTTP error-table row in SKILL.md) and a registry metadata quirk ('Required env vars: [object Object]') are present but do not change runtime behavior.
✓
Install Mechanism
No install spec and no code files — instruction-only skill (runs API calls). This minimizes risk because nothing is downloaded or written to disk by the skill package itself.
✓
Credentials
Only one credential (X_TRADING_API_KEY) is requested in the skill doc, which is appropriate and proportionate for an API integration. No unrelated secrets, system paths, or extra credentials are requested.
✓
Persistence & Privilege
always is false and the skill does not request system-wide config or additional privileges. Model invocation is permitted (platform default); nothing in the skill attempts to modify other skills or persist credentials beyond normal environment usage.
Assessment
This skill appears internally consistent for trading on the X platform. Before installing: (1) confirm the API base URL (https://api.xtrading.com) and the GitHub homepage are legitimate for the service you expect; (2) provide a least-privilege API key (read-only or limited-order scopes) when possible; (3) be aware the agent can call the API autonomously (platform default) — require explicit confirmations for placing orders and consider testing with small/test account balances first; (4) if the registry metadata shows odd values (e.g., 'Required env vars: [object Object]'), prefer the SKILL.md authoritative list (X_TRADING_API_KEY) but verify in a trusted environment before use.

Like a lobster shell, security has layers — review code before you run it.

latestvk97a407exvt11xgk6je1mnpn5583jeks

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

📈 Clawdis
Env[object Object]

Comments