← Back to Skills Marketplace
117
Downloads
0
Stars
0
Active Installs
3
Versions
Install in OpenClaw
/install normieclaw-stock-watcher-pro
Description
Monitor your portfolio, track SEC filings in real-time, receive daily stock briefings, and analyze news versus your investment thesis professionally and with...
Usage Guidance
This package is broadly coherent with its purpose (local portfolio monitoring and SEC/news ingest), but exercise caution before running it.
Key things to do before installing or executing scripts:
- Inspect and (if needed) fix the shipped scripts. The edgar-check.sh file contains malformed/duplicated path-resolution lines that may cause runtime errors or unexpected workspace traversal; do not run scripts until you inspect and test them in a safe environment.
- Run scripts manually in a sandbox first (or with a restricted test portfolio) rather than granting the agent broad, autonomous exec permissions immediately.
- Watch for optional dashboard/sync features (Supabase/Next.js). Those components could transmit data to an external DB if you supply credentials — only configure them if you understand and trust the target endpoint.
- Keep portfolio data local and protected (the package already recommends chmod 600/700). If you provide an email in config/watchlist-config.json for EDGAR User-Agent, use a contact you control.
- Do not supply brokerage API keys or other unrelated credentials to the skill. The package claims it does not execute trades — preserve that by never giving trade-execution credentials.
If you want higher assurance, request a corrected version of the scripts (fixing workspace detection logic and removing obvious typos) or run the code review in a dev sandbox before using it with real portfolio data.
Capability Analysis
Type: OpenClaw Skill
Name: normieclaw-stock-watcher-pro
Version: 1.0.3
The Stock Watcher Pro skill is a well-structured financial intelligence tool designed to monitor SEC filings and portfolio performance. It demonstrates a high level of security awareness by including explicit prompt-injection defense instructions in SKILL.md and enforcing strict local file permissions (chmod 600/700) for sensitive financial data in SETUP-PROMPT.md. The included shell scripts (edgar-check.sh and stock-watcher-scheduler.sh) are functional utilities that interact exclusively with official SEC EDGAR endpoints and the local workspace, with no evidence of data exfiltration, obfuscation, or unauthorized command execution.
Capability Assessment
Purpose & Capability
Name/description match what the files actually do: local portfolio JSON, EDGAR checks, source discovery, briefings, and optional dashboard sync. It asks the agent for web_search/web_fetch/read/write/exec access — those are powerful but consistent with building a source network and running local scripts. No unrelated cloud credentials or unexpected binaries are requested.
Instruction Scope
SKILL.md confines operations to local data files (data/*.json, data/filings) and public web sources (EDGAR, IR pages, news, social). It explicitly treats fetched content as data (prompt-injection defense) and forbids trade execution and exfiltration. That is positive. However the instructions tell the agent to run shell scripts and to copy files from a SKILL_DIR — those steps require care. The scheduler/sync/dashboard components reference pushing data to Supabase (optional) — if a user configures that, it would require external credentials and could transmit local data. The scope is mostly coherent but gives the agent broad exec/network capabilities that could be misused if the environment or follow-up prompts are not controlled.
Install Mechanism
No install spec — instruction-only with shipped scripts. No external archives or downloads. This is lower-risk than an installer that fetches remote code. The included scripts use curl/python3 and interact with public SEC endpoints.
Credentials
The skill declares no required environment variables or credentials (proportionate for EDGAR/news-only monitoring). It does require agent capabilities (exec, web_fetch, web_search, read/write) which are powerful but relevant to its function. The dashboard/DB pieces mention Supabase and market-data providers but do not request credentials in the package — they are optional integrations and would require explicit configuration by the user.
Persistence & Privilege
No 'always: true' privilege is requested. The skill is user-invocable and allows autonomous invocation (default), which is typical for skills. It writes local JSON under data/ and creates a data/filings directory — expected for this functionality and not an escalation of privileges.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install normieclaw-stock-watcher-pro - After installation, invoke the skill by name or use
/normieclaw-stock-watcher-pro - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.3
v1.0.3: Security fixes: confined scripts to skill directory, removed filesystem traversal from setup
v1.0.2
v1.0.2: MIT license, cleaned descriptions, removed cross-sell
v1.0.0
Initial publish from NormieClaw.ai
Metadata
Frequently Asked Questions
What is Stock Watcher Pro?
Monitor your portfolio, track SEC filings in real-time, receive daily stock briefings, and analyze news versus your investment thesis professionally and with... It is an AI Agent Skill for Claude Code / OpenClaw, with 117 downloads so far.
How do I install Stock Watcher Pro?
Run "/install normieclaw-stock-watcher-pro" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Stock Watcher Pro free?
Yes, Stock Watcher Pro is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Stock Watcher Pro support?
Stock Watcher Pro is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Stock Watcher Pro?
It is built and maintained by Nollio (@nollio); the current version is v1.0.3.
More Skills