← 返回 Skills 市场
117
总下载
0
收藏
0
当前安装
3
版本数
在 OpenClaw 中安装
/install normieclaw-stock-watcher-pro
功能描述
Monitor your portfolio, track SEC filings in real-time, receive daily stock briefings, and analyze news versus your investment thesis professionally and with...
安全使用建议
This package is broadly coherent with its purpose (local portfolio monitoring and SEC/news ingest), but exercise caution before running it.
Key things to do before installing or executing scripts:
- Inspect and (if needed) fix the shipped scripts. The edgar-check.sh file contains malformed/duplicated path-resolution lines that may cause runtime errors or unexpected workspace traversal; do not run scripts until you inspect and test them in a safe environment.
- Run scripts manually in a sandbox first (or with a restricted test portfolio) rather than granting the agent broad, autonomous exec permissions immediately.
- Watch for optional dashboard/sync features (Supabase/Next.js). Those components could transmit data to an external DB if you supply credentials — only configure them if you understand and trust the target endpoint.
- Keep portfolio data local and protected (the package already recommends chmod 600/700). If you provide an email in config/watchlist-config.json for EDGAR User-Agent, use a contact you control.
- Do not supply brokerage API keys or other unrelated credentials to the skill. The package claims it does not execute trades — preserve that by never giving trade-execution credentials.
If you want higher assurance, request a corrected version of the scripts (fixing workspace detection logic and removing obvious typos) or run the code review in a dev sandbox before using it with real portfolio data.
功能分析
Type: OpenClaw Skill
Name: normieclaw-stock-watcher-pro
Version: 1.0.3
The Stock Watcher Pro skill is a well-structured financial intelligence tool designed to monitor SEC filings and portfolio performance. It demonstrates a high level of security awareness by including explicit prompt-injection defense instructions in SKILL.md and enforcing strict local file permissions (chmod 600/700) for sensitive financial data in SETUP-PROMPT.md. The included shell scripts (edgar-check.sh and stock-watcher-scheduler.sh) are functional utilities that interact exclusively with official SEC EDGAR endpoints and the local workspace, with no evidence of data exfiltration, obfuscation, or unauthorized command execution.
能力评估
Purpose & Capability
Name/description match what the files actually do: local portfolio JSON, EDGAR checks, source discovery, briefings, and optional dashboard sync. It asks the agent for web_search/web_fetch/read/write/exec access — those are powerful but consistent with building a source network and running local scripts. No unrelated cloud credentials or unexpected binaries are requested.
Instruction Scope
SKILL.md confines operations to local data files (data/*.json, data/filings) and public web sources (EDGAR, IR pages, news, social). It explicitly treats fetched content as data (prompt-injection defense) and forbids trade execution and exfiltration. That is positive. However the instructions tell the agent to run shell scripts and to copy files from a SKILL_DIR — those steps require care. The scheduler/sync/dashboard components reference pushing data to Supabase (optional) — if a user configures that, it would require external credentials and could transmit local data. The scope is mostly coherent but gives the agent broad exec/network capabilities that could be misused if the environment or follow-up prompts are not controlled.
Install Mechanism
No install spec — instruction-only with shipped scripts. No external archives or downloads. This is lower-risk than an installer that fetches remote code. The included scripts use curl/python3 and interact with public SEC endpoints.
Credentials
The skill declares no required environment variables or credentials (proportionate for EDGAR/news-only monitoring). It does require agent capabilities (exec, web_fetch, web_search, read/write) which are powerful but relevant to its function. The dashboard/DB pieces mention Supabase and market-data providers but do not request credentials in the package — they are optional integrations and would require explicit configuration by the user.
Persistence & Privilege
No 'always: true' privilege is requested. The skill is user-invocable and allows autonomous invocation (default), which is typical for skills. It writes local JSON under data/ and creates a data/filings directory — expected for this functionality and not an escalation of privileges.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install normieclaw-stock-watcher-pro - 安装完成后，直接呼叫该 Skill 的名称或使用
/normieclaw-stock-watcher-pro触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.3
v1.0.3: Security fixes: confined scripts to skill directory, removed filesystem traversal from setup
v1.0.2
v1.0.2: MIT license, cleaned descriptions, removed cross-sell
v1.0.0
Initial publish from NormieClaw.ai
元数据
常见问题
Stock Watcher Pro 是什么？
Monitor your portfolio, track SEC filings in real-time, receive daily stock briefings, and analyze news versus your investment thesis professionally and with... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 117 次。
如何安装 Stock Watcher Pro？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install normieclaw-stock-watcher-pro」即可一键安装，无需额外配置。
Stock Watcher Pro 是免费的吗？
是的，Stock Watcher Pro 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Stock Watcher Pro 支持哪些平台？
Stock Watcher Pro 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Stock Watcher Pro？
由 Nollio（@nollio）开发并维护，当前版本 v1.0.3。
推荐 Skills