Moomoo Trading

Use OpenD-backed moomoo/Futu scripts for quotes, K-lines, price alerts, portfolio/account checks, and stock order execution. Triggers on moomoo, futu, OpenD,...

Security Scan

The package's scripts do what the description says (quotes, watchlists, portfolio views, and live/simulated order actions via a local OpenD), but the skill metadata omits a sensitive environment variable the runtime expects and there are live-trading actions that require careful secret handling — review before installing or running live.

Purpose & Capability

The code files (quote, watchlist, portfolio, trade, setup_check) are consistent with the skill description: they interact with a local OpenD gateway and the futu/moomoo SDKs to fetch quotes and place or modify orders. Nothing in the bundle requires unrelated cloud credentials or unexpected system access.

Instruction Scope

SKILL.md and the scripts confine actions to OpenD and the futu/moomoo SDKs (connecting to a local host/port, querying market data, and placing/canceling/modifying orders). The instructions do not ask the agent to read unrelated files or exfiltrate data to external endpoints.

Install Mechanism

There is no install spec. The README recommends installing futu-api or moomoo-api via pip — expected for a Python SDK. No remote arbitrary downloads or archive extraction are present in the bundle.

Credentials

The runtime expects a live-trading unlock secret (default env var MOOMOO_UNLOCK_PASSWORD) and references environment variables in code and SKILL.md, but the skill metadata lists no required environment variables or primary credential. That's an incoherence: a secret is required for normal live operation but not declared in the registry metadata, which can lead to user confusion and accidental insecure handling of credentials.

Persistence & Privilege

always:false and no install spec means the skill does not request forced persistent inclusion. The scripts do not attempt to modify other skills or system-wide agent settings.

What to consider before installing

This skill appears to implement the trading and data features it advertises and uses a local OpenD gateway; however: - The trade script expects a live-trading unlock password via the environment variable MOOMOO_UNLOCK_PASSWORD (or an alternate env var you pass). The skill metadata does not declare this env var — treat this as a missing metadata declaration, not a functional bug. Do not pass any trading password on the command line; use an env var as instructed. - By default scripts run in simulated mode; explicit flags (--env real --confirm) are required for live orders. Only enable real trading when you intend to and after you verify the code and OpenD connection. - Review the included Python files yourself (they are bundled) and ensure you trust the source before installing or running live operations. If you plan to use live trading, consider creating a dedicated account with limited permissions for automation and avoid storing the unlock password in shared or long-lived places. - You will need to pip install futu-api or moomoo-api and run a local OpenD instance (127.0.0.1:11111 by default). Installing packages pulls code from PyPI — verify package sources and versions if supply-chain risk is a concern. If the registry entry is intended to require the unlock password, ask the publisher to add that environment variable to the skill metadata so tool ecosystems can make the requirement explicit and reduce accidental insecure usage.

Use this skill when the user wants market data or stock trading through moomoo/Futu OpenAPI and a local OpenD gateway.

Read This First

• Read references/setup-guide.md for installation, package choice (futu-api vs moomoo-api), OpenD login, and troubleshooting.
• Read references/api-reference.md when you need exact method names, return shapes, or trade-query semantics.
• All bundled scripts lazy-load the SDK, so --help works even if neither Python package is installed yet.

Safety Rules

• Default to simulated trading unless the user explicitly asks for live trading.
• Live order placement, modification, and cancellation require --env real --confirm.
• scripts/trade.py also requires a live-trading unlock password via MOOMOO_UNLOCK_PASSWORD by default, or another env var name passed with --unlock-password-env. The script unlocks for the requested action and then re-locks.
• For cancel/modify actions, pass --market unless you also provide a ticker so the script can infer the correct trade context.
• Do not put a raw trading password directly on the command line. Use an environment variable.

Scripts

Setup check

python3 scripts/setup_check.py
python3 scripts/setup_check.py --market HK --account-index 1

Checks quote connectivity, lists discovered trading accounts, and verifies simulated account access.

Quotes and K-lines

python3 scripts/quote.py US.AAPL HK.00700
python3 scripts/quote.py US.TSLA --snapshot
python3 scripts/quote.py US.NVDA --kline --ktype K_DAY --count 10
python3 scripts/quote.py US.NVDA --kline --start 2026-03-01 --end 2026-04-01 --extended-time

Trading

python3 scripts/trade.py --ticker US.AAPL --action buy --qty 10 --price 150 --type limit --env sim
python3 scripts/trade.py --ticker US.AAPL --action sell --qty 5 --type market --env sim
export MOOMOO_UNLOCK_PASSWORD='your-trading-password'
python3 scripts/trade.py --ticker US.AAPL --action buy --qty 10 --type market --env real --confirm
python3 scripts/trade.py --cancel --order-id 12345 --market US --env sim
python3 scripts/trade.py --modify --order-id 12345 --market US --price 155 --qty 10 --env sim

Useful extras:

• --remark adds an order remark.
• --account-id / --account-index let you target a specific trading account.

Portfolio, orders, and deals

python3 scripts/portfolio.py --env sim
python3 scripts/portfolio.py --env sim --account
python3 scripts/portfolio.py --env sim --orders
python3 scripts/portfolio.py --env real --history-orders --start 2026-04-01 --end 2026-04-02
python3 scripts/portfolio.py --env real --deals

--orders shows open orders. --history-orders shows historical orders. --deals shows today's deals, or historical deals when paired with --start / --end.

Price alerts

python3 scripts/watchlist.py --tickers US.AAPL,US.TSLA --above 200 --below 150
python3 scripts/watchlist.py --tickers US.NVDA --above 950 --quit-on-alert
python3 scripts/watchlist.py --tickers HK.00700 --below 320 --once

Alerts trigger once per threshold crossing by default. Use --repeat-alerts to spam every polling cycle instead.