Stock Monitor

股票监控分析技能 - 自定义股票池监控、实时行情、技术指标分析、涨跌趋势预测、信号提醒

This skill appears to do what it claims: run local Python scripts to fetch market data, compute indicators, read ~/.openclaw JSON files (stock-pool, positions, trades, alerts), and push reports to a Feishu group via the platform's messaging tool. Before installing or enabling automated runs: 1) Review the full contents of the provided scripts (some snippets were truncated in the listing) to ensure no unexpected network endpoints or data exfiltration code exist. 2) Audit the ~/.openclaw JSON files — they contain sensitive financial/position data — and consider file permissions or using a separate account/VM for automation. 3) Confirm how report delivery to Feishu is configured on your OpenClaw platform (check that no secret tokens need to be added or that they are stored/rotated safely). 4) If you will enable cron/autonomous runs, verify the cron job configuration (times, target Feishu group) and that rate limits for external APIs are acceptable. If you want, I can scan the full untruncated script files for any hidden or suspicious network calls or credential access.

Type: OpenClaw Skill Name: xsqorange-stock-monitor Version: 1.2.2 The skill bundle is a comprehensive stock monitoring and analysis tool for A-shares and Hong Kong stocks. The Python scripts (stock_monitor.py, stock_capital.py, and hk_analyze.py) fetch real-time market data, technical indicators, and financial news from legitimate public APIs provided by Tencent (gtimg.cn), Sina (sina.com.cn), and Eastmoney (eastmoney.com). The tool manages user-specific data such as stock pools, trade history, and positions within the local ~/.openclaw/ directory, which is standard behavior for this type of application. The instructions in SKILL.md and the prompt templates in reports/prompts.md are well-defined and focused on ensuring data accuracy and report quality, with no evidence of malicious prompt injection, unauthorized data exfiltration, or harmful execution.