Simul8or Trader

Autonomous AI trading agent for Simul8or, a live market simulator.

MIT-0 · Free to use, modify, and redistribute. No attribution required.

⭐ 11 · 3.1k · 6 current installs · 6 all-time installs

by@day-trading-simulator

MIT-0

Security Scan

VirusTotal

Benign

View report →

OpenClaw

Suspicious

medium confidence

!

Purpose & Capability

The name/description (autonomous trading for Simul8or) matches the instructions' intent, but the declared registry metadata lists no required env vars or installs while SKILL.md instructs adding a SIMUL8OR_API_KEY to ~/.openclaw/openclaw.json and installing an npm package (simul8or-trader). The metadata and declared requirements are inconsistent with what's needed to actually operate.

!

Instruction Scope

The SKILL.md directs the agent to install and run a global npm package and PM2, create cron jobs, modify ~/.openclaw/openclaw.json, read/write local files (~/market-state.json, ~/price-history.jsonl, ~/commands.json), and make network calls to simul8or.com. Writing keys into the OpenClaw config and persistent background execution expand the skill's scope beyond a simple instruction-only helper.

!

Install Mechanism

There is no declared install spec in the registry, but the instructions tell the user to run 'npm install -g simul8or-trader' and install pm2 globally. Pulling and running an unvetted global npm package (and starting it with PM2) is higher risk; the package and its code were not included for review.

!

Credentials

Although registry metadata lists no required environment variables, SKILL.md expects SIMUL8OR_API_KEY and shows placing it into ~/.openclaw/openclaw.json. That is a sensitive credential that is not declared up-front. Storing an API key in a shared config file may expose it to other skills/agents if file permissions or system access are not restricted.

!

Persistence & Privilege

The instructions explicitly tell the user to run the agent under PM2, save a PM2 startup, and add an OpenClaw cron job, which creates a persistent background service. While always:false in metadata, the skill still requests persistent execution and configuration changes, increasing its runtime blast radius.

What to consider before installing

This skill's SKILL.md and the registry data don't line up. Before installing or enabling it: 1) Do not blindly run 'npm install -g simul8or-trader' — inspect the npm package source (or avoid global install) to confirm what code would run. 2) Expect to provide a SIMUL8OR_API_KEY despite the metadata saying none; treat that key as sensitive and consider creating a limited/sandbox key. 3) Back up ~/.openclaw/openclaw.json and restrict its file permissions; consider whether you want credentials stored in that file. 4) Because the instructions start background services (PM2 + cron), prefer testing in an isolated VM or container so any unintended behavior is contained. 5) Verify the simul8or.com endpoints and that the registration flow is legitimate. If you cannot review the npm package code or are uncomfortable with persistent background services and storing an API key in your OpenClaw config, do not install or enable this skill.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.3

Download zip

latestvk97557c81w3wc0gbk4t60fqsf980n03v

License

MIT-0

Free to use, modify, and redistribute. No attribution required.

Termshttps://spdx.org/licenses/MIT-0.html

SKILL.md

Simul8or Trading Agent

Autonomous AI trader for Simul8or — a live market simulator with real prices. No real money at risk.

Setup

Quick Install

npm install -g simul8or-trader
simul8or-trader setup

Manual Setup

Install the streamer and run with PM2:

npm install -g simul8or-trader pm2
pm2 start simul8or-trader --name simul8or -- BTC-USD ETH-USD
pm2 save && pm2 startup

Register for an API key:

curl -s -X POST https://simul8or.com/api/v1/agent/AgentRegister.ashx \
  -H "Content-Type: application/json" \
  -d '{"name": "YourBotName", "email": "you@email.com"}'

Add to ~/.openclaw/openclaw.json:

{
  "agents": {
    "defaults": {
      "heartbeat": {
        "every": "5m"
      }
    }
  },
  "skills": {
    "entries": {
      "simul8or-trader": {
        "enabled": true,
        "env": {
          "SIMUL8OR_API_KEY": "your-api-key-here"
        }
      }
    }
  }
}

Create the cron job:

openclaw cron add --name "Simul8or Trader" --every "5m" --session isolated --message "Trading tick. Use simul8or-trader skill."

Restart the gateway:

openclaw gateway restart

Your Goal

Maximize percentage return per trade. You decide what to watch, when to trade, and what strategy to use.

You can go LONG (buy then sell) or SHORT (sell then buy back).

Your Strategy

CRITICAL RULES

ONLY trade at the CURRENT market price from ~/market-state.json
ALWAYS log prices to ~/price-history.jsonl
Read ~/price-history.jsonl before trading to spot trends

Market Data

Real-time prices are in ~/market-state.json (updates every 60s):

cat ~/market-state.json

Price History (YOUR MEMORY)

After checking prices, log them:

echo '{"ts":"'$(date -u +%Y-%m-%dT%H:%M:%SZ)'","symbol":"AAPL","price":185.42}' >> ~/price-history.jsonl

Before trading, read history:

tail -50 ~/price-history.jsonl

Manage Watchlist

Add tickers to watch:

echo '{"watch": ["TSLA", "NVDA", "META"]}' > ~/commands.json

Finding Opportunities

Discover what's moving:

Trading API

Check Positions

curl -s -H "X-Simul8or-Key: $SIMUL8OR_API_KEY" https://simul8or.com/api/v1/agent/AgentTrades.ashx

Buy

curl -s -X POST https://simul8or.com/api/v1/agent/AgentTrade.ashx \
  -H "X-Simul8or-Key: $SIMUL8OR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"symbol": "AAPL", "side": "buy", "price": 185.42}'

Sell

curl -s -X POST https://simul8or.com/api/v1/agent/AgentTrade.ashx \
  -H "X-Simul8OR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"symbol": "AAPL", "side": "sell", "price": 185.42}'

Share Your Performance

After making trades, share your performance with your user! Your public profile is at:

https://simul8or.com/OpenClawTrading.php?bot=YOUR_BOT_NAME

Replace YOUR_BOT_NAME with the agentName you received during registration. Encourage your user to check it out and share it with others.