test
v1.0.0Create and manage AI-powered trading bots via natural language. Paper & live trading, portfolio monitoring, backtesting, stock quotes, and options chains.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (AI trading bots) match the declared requirement: a single VIBETRADER_API_KEY. The skill's features (bot creation, portfolio, quotes, backtesting) are consistent with a trading-provider integration.
Instruction Scope
SKILL.md's runtime instructions are scoped to trading tasks and configuring the VIBETRADER_API_KEY. It points the agent to an external MCP server (https://vibetrader-mcp-289016366682.us-central1.run.app/mcp) — expected for a managed service but important to note because runtime data (trade commands, account queries) will flow there. The doc does not direct reading unrelated files or other env vars.
Install Mechanism
Instruction-only skill with no install spec and no code files — nothing is written to disk by an installer. Low install risk.
Credentials
Only one required env var (VIBETRADER_API_KEY) is declared and used in instructions. Storing the API key in ~/.openclaw/openclaw.json is suggested (normal for OpenClaw), but it's worth noting that this writes a long-lived credential to a local config file.
Persistence & Privilege
always:false and no special system-wide privileges requested. The skill can be invoked autonomously (platform default); because it can place trades when given an API key, autonomous invocation increases risk if you enable live mode. Consider limiting autonomy or keeping the skill in paper mode until you trust it.
Assessment
This skill appears internally consistent for providing trading-bot functionality and only requests one API key (VIBETRADER_API_KEY). Before installing: 1) Verify you trust the external service and its MCP server URL (the skill sends commands/data there). 2) Keep the key scope-limited if possible and store it securely; the README suggests adding it to ~/.openclaw/openclaw.json which creates a persistent credential on disk. 3) Start in paper-trading mode and monitor actions closely before enabling live trading. 4) If you plan to allow autonomous actions, be aware the agent could execute trades using the provided API key — you may prefer to require explicit confirmation for trade-executing commands. If you want further assurance, ask the publisher for documentation on how brokerage credentials are handled (e.g., whether Alpaca credentials are kept only on the Vibetrader site and not stored by the skill).Like a lobster shell, security has layers — review code before you run it.
Runtime requirements
EnvVIBETRADER_API_KEY
latest
VibeTrader - AI Trading Bots
Create and manage AI-powered trading bots using natural language. Trade stocks, ETFs, crypto, and options with automated strategies.
What You Can Do
🤖 Bot Management
- Create bots from natural language: "Create a bot that buys AAPL when RSI drops below 30"
- List, start, pause, delete your bots
- View bot performance and trade history
- Backtest strategies before going live
📊 Portfolio & Trading
- View positions and account balance
- Get real-time quotes for stocks, ETFs, and crypto
- Place manual orders (buy/sell)
- Switch between paper and live trading
📈 Market Data
- Stock and ETF quotes
- Options chains with Greeks
- Market status checks
Setup
-
Get your API key from vibetrader.markets/settings
-
Set the environment variable in your OpenClaw config (
~/.openclaw/openclaw.json):
{
"skills": {
"entries": {
"vibetrader": {
"env": {
"VIBETRADER_API_KEY": "vt_your_api_key_here"
}
}
}
}
}
Or export it in your shell:
export VIBETRADER_API_KEY="vt_your_api_key_here"
Available Tools
| Tool | Description |
|---|---|
authenticate | Connect with your API key (auto-uses env var if set) |
create_bot | Create a trading bot from natural language |
list_bots | List all your bots with status |
get_bot | Get detailed bot info and strategy |
start_bot | Start a paused bot |
pause_bot | Pause a running bot |
delete_bot | Delete a bot |
get_portfolio | View positions and balance |
get_positions | View current open positions |
get_account_summary | Get account balance and buying power |
place_order | Place a buy/sell order |
close_position | Close an existing position |
get_quote | Get stock/ETF/crypto quotes |
get_trade_history | See recent trades |
run_backtest | Backtest a bot's strategy |
get_market_status | Check if markets are open |
Example Prompts
Create Trading Bots
- "Create a momentum bot that buys TSLA when RSI crosses below 30 and sells above 70"
- "Make an NVDA bot with a 5% trailing stop loss"
- "Create a crypto scalping bot for BTC/USD on the 5-minute chart"
- "Build an iron condor bot for SPY when IV rank is above 50"
Manage Your Bots
- "Show me all my bots and how they're performing"
- "Pause my AAPL momentum bot"
- "What trades did my bots make today?"
- "Delete all my paused bots"
Portfolio Management
- "What's my current portfolio value?"
- "Show my open positions with P&L"
- "Buy $500 worth of NVDA"
- "Close my TSLA position"
Market Research
- "What's the current price of Apple stock?"
- "Get the options chain for SPY expiring this Friday"
- "Is the market open right now?"
Backtesting
- "Backtest my RSI bot on the last 30 days"
- "How would a moving average crossover strategy have performed on QQQ?"
Trading Modes
- Paper Trading (default): Practice with virtual money, no risk
- Live Trading: Real money trades via Alpaca brokerage
Switch modes with: "Switch to live trading mode" or "Use paper trading"
MCP Server
This skill connects to the VibeTrader MCP server at:
https://vibetrader-mcp-289016366682.us-central1.run.app/mcp
Support
- Website: vibetrader.markets
- Documentation: vibetrader.markets/docs
Comments
Loading comments...
