StockScanner Pro

社交媒体自动化运营助手。自动生成并发布小红书、微博、Twitter 内容，定时发送、互动回复。

This package looks like a half-implemented social-posting assistant: the docs tell you to store platform credentials and a license_key in ~/.openclaw/openclaw.json, but the registry metadata does not declare those requirements and the included scripts are stubs that only print actions rather than actually calling platform APIs. Before installing or putting real secrets into your OpenClaw config: (1) inspect or run the code in a sandbox to confirm where credentials are read and whether they're transmitted to any external endpoints; (2) prefer creating limited-scope API tokens (not full account passwords) and avoid storing more-privileged secrets in the config until you verify behavior; (3) if you need full posting functionality, ask the author for a clear manifest of required credentials and for the code to be completed or for a vetted release; (4) if you see unexpected network calls (to domains other than official platform APIs) or code that exfiltrates data, do not use it and remove stored secrets. Additional info that would lower suspicion: updated metadata declaring the config path/required creds, and an implementation that clearly uses only the official platform APIs (or documented OAuth flows) with no external exfiltration.

Type: OpenClaw Skill Name: stockscanner-pro Version: 1.0.0 The skill bundle is a social media automation tool designed to schedule and publish content to Twitter, Weibo, and Xiaohongshu. The core logic in `scripts/post.py` implements a basic task management system using a local JSON file, while the `SKILL.md` provides instructions for the AI agent to handle user requests and configuration. Although the tool requires sensitive credentials (API keys and cookies) for operation, there is no evidence of data exfiltration, malicious execution, or persistence mechanisms beyond the stated purpose of scheduling posts via cron. A minor metadata mismatch in `_meta.json` (referencing 'stockscanner-pro') appears to be a harmless template error.