Ripe Scanner

Free stock and crypto momentum scanner with social sentiment analysis. Scans S&P 500, Nasdaq 100, and crypto for momentum signals using RSI, EMA, Bollinger S...

Key things to consider before installing: - The README/SKILL.md claim "No API keys required," but the bundled script can use a TAVILY_API_KEY to query a third-party (Tavily) for Reddit sentiment. That credential is not declared in the skill metadata — only provide it if you trust the Tavily service and the skill's author. - If you do NOT set TAVILY_API_KEY, Reddit sentiment calls will silently be disabled (the code returns None), but StockTwits and yfinance calls will still make outbound network requests. - The skill writes data to ~/.openclaw/workspace/memory/ripe_scanner and /tmp; snapshots may include symbol lists and scraped social results. Review those files if you run the skill. - Source/homepage are unknown — consider reviewing the full script locally (scripts/ripe-scan.py) for any additional network endpoints or unexpected behavior before running. - If you want to be cautious: run the skill in a sandboxed environment or network-restricted container, or remove/inspect the Tavily call before use. If you need safer behavior, ask the author to declare TAVILY_API_KEY in metadata and document when it will be used.

Type: OpenClaw Skill Name: ripe-scanner Version: 1.1.0 The ripe-scanner skill is a legitimate financial analysis tool designed to scan stocks and cryptocurrencies for momentum signals. The Python script (scripts/ripe-scan.py) uses standard libraries like yfinance, pandas, and numpy to calculate technical indicators and fetches social sentiment data from StockTwits and Tavily (for Reddit search). The code logic is transparent, follows the functionality described in SKILL.md and README.md, and stores data locally within the designated OpenClaw workspace. No evidence of data exfiltration, malicious execution, or prompt injection was found.