Leapcat Skills

A comprehensive set of 7 AI agent skills for the Leapcat platform. All commands use npx leapcat@0.1.1 — no global install needed, just Node.js 18+.

Available Skills

leapcat-auth

Login, logout, session management, token refresh, re-authentication, and trade password operations.

leapcat-kyc

KYC identity verification including document upload, personal info submission, agreements, and status polling.

leapcat-ipo

Browse IPO projects, estimate costs, subscribe, cancel, and monitor subscription status.

leapcat-trading

Place buy/sell stock orders (limit/market), monitor order status, and cancel pending orders.

leapcat-wallet

Check balance, get deposit address, initiate withdrawals, view debt status, and fund activity history.

leapcat-portfolio

View portfolio overview and individual stock positions with unrealized P&L.

leapcat-market

Real-time stock quotes, K-line charts, market indices, stock search, exchange rates, and fee schedules. No authentication required.

Quick Start

Check market data (no login needed):

npx leapcat@0.1.1 market quote --symbol 00700.HK --json
npx leapcat@0.1.1 market indices --json

Login to access authenticated features:

npx leapcat@0.1.1 auth login --email your@email.com --send-only --json
npx leapcat@0.1.1 auth login --email your@email.com --otp-id <id> --otp-code <code> --json

Then use any skill:

npx leapcat@0.1.1 wallet balance --json
npx leapcat@0.1.1 portfolio positions --json
npx leapcat@0.1.1 ipo projects --json

Notes

• All commands output JSON when using the --json flag
• Session tokens are stored locally at ~/.config/leapcat/tokens.json
• Access tokens auto-refresh; re-login only needed after 30 days of inactivity
• For sensitive operations (withdrawals), run npx leapcat@0.1.1 auth reauth --json first

Security & Provenance

• Source code: github.com/leapcat-ai/leapcat-skills
• npm package: npmjs.com/package/leapcat
• Version pinned: All commands use npx leapcat@0.1.1 (pinned, not @latest) to prevent supply-chain drift
• Token storage: ~/.config/leapcat/tokens.json is created automatically after login; contains JWT access/refresh tokens, not user credentials
• KYC documents: Only uploaded when the user explicitly provides file paths; the CLI does not scan or access local files automatically
• No env vars required: Authentication is handled via email OTP, no API keys needed