Trading Assistant Core

Market data analysis toolkit with technical indicators and portfolio tracking. Educational use only.

This package appears internally consistent for an educational trading-analysis tool, but before installing or running it: 1) Inspect requirements.txt and the remaining (omitted) Python files (trading_signals.py, support_resistance.py, any notification modules) for network calls, webhooks, or hardcoded remote endpoints (Feishu/DingTalk/email integrations are mentioned in README). 2) Run it in an isolated environment/container and only provide the minimal API keys needed (rotate keys after testing if concerned). 3) Be aware the tool will create/write local files (data/, logs/, portfolio/holdings.json, accuracy_log.json); if you have sensitive data in your environment, avoid mounting sensitive directories. 4) Do not supply brokerage credentials — this skill claims 'no trade execution' and there is no declared brokerage credential requirement; supplying broker keys would be unnecessary and risky. 5) If you plan to trust outputs for real trading, validate indicator logic and test thoroughly; the repository is labelled educational and 'not financial advice.' Finally, if you want higher assurance, provide the omitted source files (or examine them yourself) so they can be checked for any outbound notification code or unexpected behavior — I rated confidence medium because a few files were truncated/omitted in the listing.

Type: OpenClaw Skill Name: trading-assistant-core Version: 4.0.0 The skill bundle is a comprehensive trading assistant for technical analysis and portfolio management. It fetches market data from legitimate sources (Twelve Data, Alpha Vantage, and Sina Finance) and performs calculations for indicators like RSI and MACD. The code follows security best practices mentioned in its documentation, such as avoiding 'eval()', 'subprocess', and automatic '.env' loading to prevent secret exposure. While 'config.py' contains a default Feishu 'chat_id', it appears to be a placeholder for the notification feature rather than a malicious exfiltration vector.