vibe-trading
HKUDS/Vibe-TradingSkill
Professional finance research toolkit — backtesting (11 engines + benchmark comparison panel), factor analysis, Alpha Zoo (478 pre-built alphas across qlib158/alpha101/gtja191/academic/fundamental), options pricing, 90 finance skills, 30 multi-agent swarm teams, Trade Journal analyzer, and Shadow Account (extract → backtest → render) across 29 market-data sources (tushare, yfinance, okx, binance, akshare, baostock, tencent, mootdx, ccxt, futu, mt5, tickerall, local, eastmoney, sina, stooq, yahoo, pykrx, india_broker, qveris, longbridge, nobitex, wallex, plus optional-key finnhub/alphavantage/t
Why this score
This repo hosts 10 skills, so its 35,948 stars are split between them (about 3,595 each) for scoring.
Popularity score: 87/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank
Security
Scanned Oct 20, 2026 at commit 097b29feab97, first 300 source files (it's a large repo), with Cisco's open-source skill-scanner.
What its code does:
- Reads environment variables and sends network requests with them API clients do this to send your key to the service. Check which service it talks to.src/providers/llm.py and 2 more
- Runs shell commands Common for dev tools. Read the commands it runs.cli/commands/update.py:189, src/tools/bash_tool.py:129
- Runs code it builds while running (eval or exec) Harder to read ahead of time, since the code is assembled while it runs.src/core/runner.py:87 and 1 more
- Makes network requestscli/_legacy.py:3163, cli/commands/update.py:69, cli/main.py:1113 and 15 more
- Reads environment variables, where API keys usually livesrc/tools/mcp.py:670
Web addresses in its code:
- api.ibkr.comsrc/config/schema.py:230
- api.dingtalk.comsrc/channels/dingtalk.py:301
- chatgpt.comcli/_legacy.py:6063
- api-inference.modelscope.cncli/_legacy.py:5923
- api.bcb.gov.brsrc/br_data/bcb.py:3
- api.botframework.comsrc/channels/msteams.py:535
- api.deepseek.comcli/_legacy.py:5883
- api.gildata.comsrc/config/env_schema.py:230
- api.openai.comcli/_legacy.py:5943
- api.siliconflow.cncli/_legacy.py:5903
- api.siliconflow.comcli/_legacy.py:5913
- integrate.api.nvidia.comcli/_legacy.py:5933
- nodejs.orgcli/_legacy.py:6489
- okx.combacktest/loaders/okx.py:59
- opencode.aicli/_legacy.py:5893
And 33 more.
These are the sites named in the code, so it's where your data could go. It isn't a complete list: code can build addresses while it runs, and a few of these may be links rather than calls. Whatever you send also goes to the AI model you use.
A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan
Alternatives
Other makers' add-ons that do the same job, next to this one.
| Name | Score | Stars | Context | Updated |
|---|---|---|---|---|
| This onevibe-trading HKUDS/Vibe-Trading · Skill | 87 | ★ 36k | ≈153 always | 16d ago |
| tuige-shortline-trading shouldnotappearcalm/a-share-skill · Skill Same job: trading & investing | 65 | ★ 248 | ≈26 always | 24d ago |
| binance-trading-signal binance/binance-skills-hub · Skill Same job: trading & investing | 60 | ★ 1.1k | ≈29 always | 16d ago |
| noraz-swarm-trading mogons/noraz-agent · Skill Same job: trading & investing | 67 | ★ 169 | ≈47 always | 1mo ago |
| tqsdk-trading-and-data shinnytech/tqsdk-python · Skill Same job: trading & investing | 88 | ★ 5.1k | ≈156 always | 19d ago |
| vibe-check TexasBedouin/vibe-check · Skill Both about vibe | 68 | ★ 621 | ≈23 always | 4mo ago |