Sharesight Skill for OpenClaw

Manage Sharesight portfolios, holdings, and custom investments via the API

This skill appears to do what it says: a local CLI and API wrapper for Sharesight. Before installing or enabling it, verify the publisher/source (no homepage was provided here). Be aware that you must supply your Sharesight Client ID and Client Secret — treat those like passwords. The tool caches access tokens under ~/.config/sharesight-cli/config.json (permissions set to 0600). Write operations are disabled by default; only set SHARESIGHT_ALLOW_WRITES=true if you trust the code and the environment. If you are concerned about trust, inspect the included Python files yourself or run the CLI in an isolated environment; if credentials are ever exposed, rotate them in the Sharesight account.

Type: OpenClaw Skill Name: sharesight-skill Version: 1.0.0 The OpenClaw AgentSkills skill bundle for Sharesight is benign. It provides a legitimate CLI interface to the Sharesight API, handling financial portfolio data. Credentials (client ID/secret) are read from environment variables, and access tokens are stored securely in `~/.config/sharesight-cli/config.json` with restrictive permissions (0o600). All network communication is directed to the official Sharesight API endpoints (`api.sharesight.com`). Write operations are explicitly protected by an environment variable (`SHARESIGHT_ALLOW_WRITES=true`), preventing accidental data modification. The `SKILL.md` and `README.md` files contain clear, purpose-aligned instructions and documentation, with no evidence of prompt injection attempts or instructions for the agent to perform actions outside the stated purpose.