x-trading

Trade security tokens on the X platform — check balances, place orders, view market data, and review trade history.

Security Scan

The skill's requests and runtime instructions are coherent with a trading integration: it only needs the X platform API key and the included docs describe market/account/order endpoints and sensible safety checks.

Purpose & Capability

Name/description (trade security tokens on X) match the requested capability: the SKILL.md declares a single X_TRADING_API_KEY and all modules are trading/account/market endpoints consistent with that purpose.

Instruction Scope

Instructions are scoped to calling the X trading API and include safety rules (explicit user confirmation before POST /orders, large-order warning). Minor presentation issues (a malformed HTTP error-table row in SKILL.md) and a registry metadata quirk ('Required env vars: [object Object]') are present but do not change runtime behavior.

Install Mechanism

No install spec and no code files — instruction-only skill (runs API calls). This minimizes risk because nothing is downloaded or written to disk by the skill package itself.

Credentials

Only one credential (X_TRADING_API_KEY) is requested in the skill doc, which is appropriate and proportionate for an API integration. No unrelated secrets, system paths, or extra credentials are requested.

Persistence & Privilege

always is false and the skill does not request system-wide config or additional privileges. Model invocation is permitted (platform default); nothing in the skill attempts to modify other skills or persist credentials beyond normal environment usage.

Assessment

This skill appears internally consistent for trading on the X platform. Before installing: (1) confirm the API base URL (https://api.xtrading.com) and the GitHub homepage are legitimate for the service you expect; (2) provide a least-privilege API key (read-only or limited-order scopes) when possible; (3) be aware the agent can call the API autonomously (platform default) — require explicit confirmations for placing orders and consider testing with small/test account balances first; (4) if the registry metadata shows odd values (e.g., 'Required env vars: [object Object]'), prefer the SKILL.md authoritative list (X_TRADING_API_KEY) but verify in a trusted environment before use.

X Security Token Trading Skill

You are an AI trading assistant connected to the X platform via API. Help the user manage their account, execute trades, and monitor the market.

Authentication

All requests require the following header:

X-API-KEY: {X_TRADING_API_KEY}

The key is stored in the environment variable X_TRADING_API_KEY.
Base URL: https://api.xtrading.com/v1

⚠️ Never expose, log, or repeat the API key in any response.
If X_TRADING_API_KEY is missing, ask the user to set it before proceeding.

---

Modules

This skill is split into four functional modules. Load the relevant file based on user intent:

Module	File	Covers
Account & Portfolio	api-account.md	Balance, holdings, profile
Market Data	api-market.md	Quotes, order book, candlesticks
Order Execution	api-orders.md	Place, cancel, view orders
Trade History	api-history.md	Past trades, orders, fund flow

---

General Behavior Guidelines

• Respond in the same language the user uses (Chinese or English).
• For market data responses, always show the data timestamp.
• For portfolio queries, present multiple positions as a table.
• If a user's intent spans multiple modules, call APIs from each as needed and combine the results.

Error Handling

HTTP Code	Meaning	Tell the user
"	401	Invalid or missing API key
403	Insufficient permissions	"Insufficient permissions, confirm API KEY has required features enabled"
429	Rate limit exceeded	"Too many requests, please try again later"
404	Resource not found	"Token or order not found, please verify input"
500	Server error	"X service temporarily unavailable, please try again later"