StockIndexMonitor

全功能智能股票监控预警系统。支持成本百分比、均线金叉死叉、RSI超买超卖、成交量异动、跳空缺口、动态止盈等7大预警规则。符合中国投资者习惯（红涨绿跌）。

This skill claims a full stock-monitoring daemon but provides no code, install steps, or data sources — and asks you to run a local ./control.sh that isn't included. Before installing or following these instructions: (1) Ask the publisher for the actual source code or an install package and a provenance (GitHub repo, release URL, checksum). (2) Request explicit details of what market-data APIs or news endpoints it uses and what credentials (if any) are required. (3) Never run an unknown control.sh: inspect its contents first; run it in a sandbox or throwaway VM as a non-privileged user. (4) If the skill will fetch code at runtime, require signed releases from a trusted host. (5) If you plan to provide API keys, only give the minimum-scoped keys and verify network endpoints the skill uses. Given the missing pieces, do not run any start scripts or grant credentials until the author supplies source code and a clear install plan.

Type: OpenClaw Skill Name: stock-index-monitor Version: 1.0.0 The skill bundle contains documentation (SKILL.md) that instructs the AI agent to execute shell commands and manage background processes via a script named 'control.sh'. While the stated purpose of a stock monitoring system is plausible, the bundle is incomplete as it lacks the actual implementation code and the shell scripts it references. Directing an agent to execute unverified external shell scripts is a high-risk behavior (potential RCE) that requires the missing source code for a proper security audit.