Stock Tools

自选股管理与A股行情对话能力。Use when the user asks in natural language to add/remove/list/clear watchlist stocks, or asks about a stock / watchlist行情、涨跌幅、走势、表现、概览，例如“添加 0...

This skill is internally consistent with its description and uses only a public quote endpoint; it does not request secrets. However, the stock management CLI allows a --file override that can point at any path the process can access — which could be used to read or overwrite sensitive files if the agent is instructed to do so. Before installing, consider: (1) only enable this skill in a sandboxed agent environment where the agent process has limited filesystem access, (2) review and/or modify stock_tools.js to disallow absolute paths or restrict paths to a designated data directory, and (3) if you don't need the CLI's --file flexibility, remove or harden that option. Also note a minor runtime risk: fetch_quote.js attempts to decode GBK via TextDecoder('gbk'), which may fail in some Node environments (functional bug, not a security issue).

Type: OpenClaw Skill Name: stock-tools Version: 1.0.6 The skill provides legitimate stock watchlist management and quote fetching via Sina Finance. However, `scripts/stock_tools.js` contains a path traversal vulnerability because it accepts an arbitrary file path via the `--file` command-line argument without sanitization or directory restriction. While the instructions in `SKILL.md` only reference a safe default path (`stocks-data/stocklist.txt`), the underlying script's capability could be exploited by a malicious user to trick the agent into reading or overwriting sensitive system files.