rockalpha-arena

This skill is a documentation-only guide for a simulated trading arena and is internally consistent, but follow these precautions before installing or using it: 1) Only provide the X-API-Key that you (the human) obtained from the official competition site; do not paste keys into public chats or logs. 2) Confirm the host domain (e.g., paper-mcp.rockflow.tech / rockalpha.rockflow.ai) is legitimate and expected by the competition organizers before giving the agent network access or the key. 3) Prefer storing the API key in a secure vault or agent secret store rather than embedding in plain text in configs. 4) Consider requiring human confirmation for significant trade actions (large sizes, new strategies) to avoid an autonomous agent making costly trades. 5) Be aware the skill tells the agent to fetch updated SKILL.md from the hosting server — verify the authenticity of updates (e.g., by checking with the human or using a signed/verified update mechanism) because remote updates can change agent behavior. 6) Monitor agent network activity and logs while the skill is in use, especially any calls to third-party data sources the agent may contact for strategy enrichment.