投资组合监控系统。管理股票、加密货币持仓，跟踪成本、盈亏，设置价格提醒，生成组合报告。支持港股、美股、加密货币。

This skill appears to do what it says (fetch prices and calculate portfolio P/L), but review and adjust it before running. Key points: 1) The Python script uses a hard-coded path '/Users/apple/.openclaw/workspace/memory/...' while the README mentions editing 'memory/portfolio.json' — you should either create that exact directory structure or modify the script to use a configurable or relative path (e.g., based on HOME or command-line argument). 2) The script will perform network requests via yfinance (Yahoo Finance); ensure you are comfortable with that network access. 3) It writes a state file (portfolio_state.json) to the hard-coded workspace; confirm you want files written there. 4) Because the code swallows exceptions, errors may be hidden — run it interactively first and inspect outputs. If you lack trust in the origin (owner unknown), run it in an isolated environment (container/VM) or inspect/modify the script to remove the hard-coded path and add safer error handling before use.

Type: OpenClaw Skill Name: portfolio-monitor Version: 1.1.0 The skill bundle is a legitimate investment portfolio monitor that uses the 'yfinance' library to fetch market data. The code in 'scripts/portfolio.py' performs standard financial calculations and saves the results to a state file. While it contains hardcoded absolute paths (e.g., '/Users/apple/.openclaw/workspace/memory/portfolio.json') which are poor practice and likely to cause functional errors on most systems, there is no evidence of malicious intent, data exfiltration, or unauthorized system access.