Openclaw Wealth Guide

自动采集、处理多种数据源并导出JSON、CSV、Excel等格式，支持定时任务及OpenClaw无缝集成，适合中国市场。

This repository appears to be a legitimate data‑harvester/OpenClaw integration. Before installing or running it: - Review and run it in a virtual environment or isolated machine (e.g., VM or container). It performs network I/O (web/API scraping) and will make outbound HTTP requests. - Inspect scripts/build_package.py and scripts/init_git_repo.py before running; they execute shell commands (subprocess.run with shell=True). Don’t run build/init scripts with elevated privileges or on production hosts without review. - Provide credentials (DB/API keys) only via configuration files you control; the project does not request environment secrets but adapters accept auth in config — avoid storing secrets in unencrypted files. - Verify upstream source if you need to trust updates (repo URLs point to Gitee/GitHub usernames that you may want to confirm). The codebase has minor typos and import inaccuracies in examples — treat examples as illustrative, not production-ready. - Pin and audit dependencies (requirements.txt includes many heavy packages); consider installing dependencies in a venv and scanning them with your usual supply-chain tools. If you want deeper assurance, ask for a full review of the remaining omitted source files (the scan truncated 26 files) or a dependency SBOM and runtime network/call list to check for unexpected endpoints.

Type: OpenClaw Skill Name: openclaw-wealth-guide Version: 1.0.0 The 'Smart Data Harvester' is a functional framework designed for automated data collection, processing, and exportation. A review of the source code across the 'src/data_harvester' directory, including adapters for Web, API, and Database sources, shows that the logic is consistent with the stated purpose. While the tool possesses high-risk capabilities such as network access (requests), file system modification (exporters), and database interaction (SQLAlchemy), these are necessary for its functionality and are implemented using standard libraries without evidence of obfuscation or malicious intent. No indicators of data exfiltration, unauthorized persistence, or harmful prompt injection were found.