港股美股监控

港股/美股/加密货币实时监控。使用 Yahoo Finance (yfinance) 获取实时价格、技术指标监控。支持自定义股票池、涨跌提醒、均线/RSI/MACD信号。

This skill appears to do exactly what it claims: fetch market data via yfinance, compute indicators, print results, and save a small state file. Before installing or running it: 1) Inspect and (preferably) change the hard-coded state path '/Users/apple/.openclaw/workspace/memory/stocks_monitor.json' to a path appropriate for your environment or make it configurable; otherwise it may fail or write into an unexpected home directory. 2) Install packages inside a virtualenv (avoid '--break-system-packages') to prevent altering system Python packages. 3) Confirm you are comfortable with the script contacting Yahoo Finance (yfinance) over the network. 4) If you plan automated runs (cron), ensure the working directory and Python environment are set correctly. 5) If you need alerts or external posting, add explicit code that sends data to your chosen endpoint and review that code carefully before supplying credentials.

Type: OpenClaw Skill Name: stock-monitor-hkus Version: 1.1.0 The skill provides stock and cryptocurrency monitoring using the yfinance library. However, `scripts/monitor.py` contains a hardcoded absolute file path (`/Users/apple/.openclaw/workspace/memory/stocks_monitor.json`) for saving state, which is a significant implementation flaw and a potential security risk if the environment matches the hardcoded path. While there is no evidence of intentional data exfiltration or backdoors, the use of specific absolute paths instead of relative workspace paths is considered a high-risk vulnerability.