← 返回 Skills 市场
Portfolio Tracker
作者
vachanalaviswanath
· GitHub ↗
· v0.0.1
3301
总下载
1
收藏
20
当前安装
1
版本数
在 OpenClaw 中安装
/install portfolio-tracker
功能描述
Automatically tracks and analyzes Vish's stock and crypto portfolio using live Yahoo Finance data, providing updates, performance summaries, and rebalancing...
安全使用建议
This skill appears to do what it says (read a local holdings file, scrape Yahoo Finance, update a portfolio file), but exercise caution before installing/using it:
- The SKILL.md asks the agent to 'attach' an existing Chrome profile (profile=open-claw-chrome). That can give the automation access to cookies, logged-in sessions, and other browser data unrelated to portfolio tracking. Confirm what 'attach' means in your environment and whether you are comfortable granting that access.
- The holdings file contains real financial and crypto positions. Only run this skill if you trust the skill owner and the runtime environment; consider using a sanitized/test holdings file first.
- The included Python script is small and appears harmless (it just reads and parses the local holdings file). Still review any code before use and run in a sandbox if possible.
- If you need to mitigate risk: create a dedicated browser profile with no saved logins and only the minimal extension/context required; or modify the workflow to use an ephemeral browser context instead of attaching an existing profile.
If the author documents why a profile must be attached (and declares the config path or permission), or if the skill is updated to launch a fresh browser context instead of attaching an existing profile, my concern would be reduced.
功能分析
Type: OpenClaw Skill
Name: portfolio-tracker
Version: 0.0.1
The OpenClaw skill 'portfolio-tracker' is designed to automate portfolio tracking using browser automation on Yahoo Finance. The `SKILL.md` clearly outlines the workflow, which involves reading local holdings from `references/portfolio-holdings.md`, navigating to Yahoo Finance via browser actions, snapshotting data, and updating a local `portfolio-tracker.md` file. The `scripts/update-portfolio.py` script correctly reads and parses the local holdings file as described. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection intended to subvert the agent's behavior for harmful purposes. The 'TODO' section in `SKILL.md` is clearly developer guidance and not an instruction for the AI agent.
能力评估
Purpose & Capability
Name and instructions align with a portfolio tracking use-case: reading a local holdings file, scraping Yahoo Finance for quotes, computing values, and writing an analysis file. The included python script simply parses the holdings file and prints samples, which is consistent with the stated purpose. However, the SKILL.md explicitly instructs attaching a Chrome profile (profile=open-claw-chrome) for browser automation; that capability is plausible for scraping but is not reflected in declared requirements (no config paths or permissions).
Instruction Scope
Instructions tell the agent to read references/portfolio-holdings.md and to attach a Chrome extension/profile and snapshot Yahoo Finance pages to extract prices. Reading the holdings file and scraping Yahoo Finance is in-scope, but 'attach Chrome extension (profile=open-claw-chrome)' implies access to an existing browser profile (cookies, other tabs, stored auth) which is broader than the skill's stated data needs. The instructions do not direct data to external endpoints beyond Yahoo Finance, and the skill does not instruct exfiltration, but the implicit request to access a browser profile is a significant scope expansion that isn't documented as a required config path or permission.
Install Mechanism
There is no install spec; the skill is instruction-only plus a small helper script. Nothing is written to disk by an installer and no external code downloads are requested, which is low risk from an install mechanism perspective.
Credentials
The skill declares no required environment variables or config paths, yet runtime instructions expect access to a specific Chrome profile name. That is an access mismatch: attaching an existing browser profile can expose broad sensitive data (cookies, sessions, other sites) but there is no explicit declaration or justification in the manifest. The holdings file is local and expected to be read, which is proportionate to the purpose, but it contains sensitive financial information and the skill will read and process it.
Persistence & Privilege
The skill is not marked always:true, is user-invocable, and does not request persistent/system-wide modifications in the manifest. There is no evidence it modifies other skills or global configuration.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install portfolio-tracker - 安装完成后，直接呼叫该 Skill 的名称或使用
/portfolio-tracker触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.0.1
Initial release: Browser-automated stock/crypto portfolio tracking + analysis via Yahoo Finance. Supports 27 stocks/ETFs + 4 cryptos, live prices, winners/losers, rebalancing suggestions. Uses Chrome extension relay (open-claw-chrome) for real-time data fetching.
元数据
常见问题
Portfolio Tracker 是什么？
Automatically tracks and analyzes Vish's stock and crypto portfolio using live Yahoo Finance data, providing updates, performance summaries, and rebalancing... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 3301 次。
如何安装 Portfolio Tracker？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install portfolio-tracker」即可一键安装，无需额外配置。
Portfolio Tracker 是免费的吗？
是的，Portfolio Tracker 完全免费（开源免费），可自由下载、安装和使用。
Portfolio Tracker 支持哪些平台？
Portfolio Tracker 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Portfolio Tracker？
由 vachanalaviswanath（@vachanalaviswanath）开发并维护，当前版本 v0.0.1。
推荐 Skills