Stock Monitor Skill 0.1.0

全功能智能股票监控预警系统。支持成本百分比、均线金叉死叉、RSI超买超卖、成交量异动、跳空缺口、动态止盈等7大预警规则。符合中国投资者习惯（红涨绿跌）。

This package appears to be a coherent self-hosted stock-monitoring tool, but please consider the following before installing/running it: - Run in a sandbox or VM first. The package runs a persistent daemon (control.sh -> monitor_daemon.py) that will continuously make outbound HTTP requests to finance/news APIs and create logs under $HOME/.stock_monitor. - Review the code locally. The network endpoints used (eastmoney, sina, push2.eastmoney.com, search.sina.com.cn) are public finance data sources and expected for this tool; confirm you are comfortable granting the runtime outbound access to them. - Missing/misaligned files and paths: README mentions config.example.py which is not in the bundle; test_suite.py inserts an absolute developer path (/home/wesley/...) — if you run tests, either run them after adjusting paths or inspect/modify test_suite.py to avoid referencing your filesystem unexpectedly. - Ownership/metadata mismatch: _meta.json ownerId differs from the registry metadata. This could be an innocuous packaging oversight, but if provenance matters to you, ask the publisher for clarification. - Resource usage and rate limits: the daemon's schedule can be frequent (every 5 minutes during market hours) and may hit rate limits of public APIs. Consider throttling, adding caching, or running with limited network egress if you want to control usage. - Permissions: do not run the scripts as root. They are intended for user-level operation and write only to the user's home directory. If you decide to proceed, run the code in an isolated environment first, verify the exact network calls (e.g., via a proxy or firewall), and confirm the logging/ PID behavior meets your expectations.

Type: OpenClaw Skill Name: stock-monitor-skill-0-1-0-custom Version: 0.1.0 The skill bundle is a functional stock monitoring and alerting system tailored for the Chinese market. It implements technical analysis (RSI, Moving Averages), news sentiment analysis, and a background daemon for persistent monitoring. The code uses the 'requests' library to fetch public financial data from legitimate sources like Sina Finance and EastMoney, and no evidence of data exfiltration, malicious execution, or harmful prompt injection was found. A hardcoded path in 'test_suite.py' appears to be a developer oversight rather than a malicious indicator.