← Back to Skills Marketplace
Portfolio Daily Tracker
by
Yann_Sheng(SII)
· GitHub ↗
· v1.2.0
· MIT-0
385
Downloads
0
Stars
2
Active Installs
3
Versions
Install in OpenClaw
/install portfolio-daily-tracker
Description
Track and report multi-group stock portfolios with daily snapshots, live Yahoo Finance prices, P&L analytics, and push notifications (Feishu/Telegram). Suppo...
Usage Guidance
This skill appears to implement what it claims, but before running setup.sh or otherwise installing it you should: 1) inspect the GitHub repository it clones (https://github.com/Stepuuu/portfolio-daily-tracker.git) — ideally pin to a specific commit or tag instead of cloning the HEAD; 2) review the repo's scripts (portfolio_daily_update, portfolio_manager, snapshot/report scripts) to confirm there is no unexpected network exfiltration or destructive behavior; 3) review dashboard/requirements.txt and avoid installing untrusted packages without vetting; 4) run setup in a restricted environment (non-root account, isolated VM/container) if you want to test; 5) only provide FEISHU/TELEGRAM tokens and an OPENAI key if you trust the code that will transmit notifications; and 6) back up any existing portfolio data before letting the skill modify files. These precautions reduce supply-chain and execution risk. If you want, I can list the files in the upstream GitHub repo or help identify which dependencies to audit/pin.
Capability Analysis
Type: OpenClaw Skill
Name: portfolio-daily-tracker
Version: 1.2.0
The skill facilitates portfolio management by instructing the AI agent to execute shell commands with parameters derived from user input (e.g., `<ticker>`, `<qty>`), which creates a high risk of shell injection if the agent or the underlying `portfolio_manager.py` fails to sanitize inputs (SKILL.md). Additionally, `scripts/setup.sh` clones an external repository (github.com/Stepuuu/portfolio-daily-tracker.git) to fetch the 'engine' scripts, introducing a supply chain risk. While the functionality appears aligned with the stated purpose of tracking investments, the combination of shell execution and external code fetching is inherently risky.
Capability Assessment
Purpose & Capability
Name/description match what the included scripts and tools do: reading/writing portfolio files, generating snapshots/reports, updating holdings, and optionally pushing notifications. Declared optional env vars (OPENAI_API_KEY, FEISHU_WEBHOOK, TELEGRAM_BOT_TOKEN, PORTFOLIO_DIR) are coherent with the described features.
Instruction Scope
Runtime instructions and tools operate on local portfolio files under engine/portfolio (read/write snapshots, holdings, history.csv) and run engine scripts (portfolio_manager.py, portfolio_snapshot.py, portfolio_report.py, portfolio_daily_update.py). This scope is expected, but the skill instructs the user to run scripts/setup.sh which will clone an external repo and expects engine scripts that are not bundled here — the agent’s runtime behavior therefore depends on code downloaded at setup time.
Install Mechanism
There is no formal install spec in the registry, but scripts/setup.sh (bundled) will git clone https://github.com/Stepuuu/portfolio-daily-tracker.git into a target directory and then attempt pip3 install -r dashboard/requirements.txt from that repo. Cloning an external GitHub repository and running pip install from files inside it is a supply-chain risk because code and dependencies are unpinned and come from a third-party repo not reviewed here.
Credentials
No required credentials are enforced by the registry. The optional environment variables listed in SKILL.md are proportionate to the features: OPENAI_API_KEY for chat features, FEISHU_WEBHOOK/TELEGRAM_BOT_TOKEN for push notifications, and PORTFOLIO_DIR to override data paths. There are no unrelated credential requests.
Persistence & Privilege
The skill does not request always:true and does not modify other skills or global agent settings. Its actions are limited to local files under the project engine/portfolio and running engine scripts; persistent presence or elevated privileges are not requested.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install portfolio-daily-tracker - After installation, invoke the skill by name or use
/portfolio-daily-tracker - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.2.0
v1.2.0: market_daily_change排除资金流, 日期导航CSV并集, 快照缺失自动合成, 回撤基于利润算法, CSV升级11列, 成本增减解析, 声明env变量
v1.1.0
v1.1.0: Added helper scripts (setup.sh, daily-pipeline.sh, manage.sh), English SKILL_EN.md, bumped version
v1.0.0
Initial release: multi-group portfolio tracking with A-share/HK/US market support, daily snapshot pipeline, Yahoo Finance pricing, Feishu/Telegram push notifications
Metadata
Frequently Asked Questions
What is Portfolio Daily Tracker?
Track and report multi-group stock portfolios with daily snapshots, live Yahoo Finance prices, P&L analytics, and push notifications (Feishu/Telegram). Suppo... It is an AI Agent Skill for Claude Code / OpenClaw, with 385 downloads so far.
How do I install Portfolio Daily Tracker?
Run "/install portfolio-daily-tracker" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Portfolio Daily Tracker free?
Yes, Portfolio Daily Tracker is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Portfolio Daily Tracker support?
Portfolio Daily Tracker is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Portfolio Daily Tracker?
It is built and maintained by Yann_Sheng(SII) (@stepuuu); the current version is v1.2.0.
More Skills