← 返回 Skills 市场
69
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install stock-portfolio-aisa
功能描述
Create and manage stock crypto portfolios with live AISA pricing and P&L tracking. Use when: the user wants to add holdings, inspect portfolio performance, r...
安全使用建议
This skill is plausibly what it claims (portfolio management using AISA), but take these precautions before installing:
- Expect the script to contact the remote AISA/OpenAI-compatible API using your AISA_API_KEY; only provide a key you trust with these tickers and prompts.
- The script uses the 'openai' Python library but the package does not include an install step or dependency declaration — ensure you install dependencies in a controlled environment (pip install openai) or run it in an isolated environment.
- The price-fetching logic asks a language model to return 'live' prices. LLMs can hallucinate; verify returned prices against a trusted market-data source before making decisions.
- Note the script reads AISA_BASE_URL, AISA_MODEL, and CLAWDBOT_STATE_DIR environment variables though they are not declared in the manifest. If you need to audit network endpoints, confirm AISA_BASE_URL (default: https://api.aisa.one/v1).
- If you want higher confidence: ask the publisher for an explicit dependency/install section, documentation of the AISA API behavior (is it an LLM wrapper or a market-data gateway?), and a signed provenance (GitHub release/tag) or checksum for the script.
Given the manifest omissions and the unconventional use of an LLM for live pricing, treat this as 'suspicious' until those gaps are addressed.
功能分析
Type: OpenClaw Skill
Name: stock-portfolio-aisa
Version: 1.0.0
The skill provides standard portfolio management functionality, allowing users to track stock and crypto holdings via local JSON storage. The Python script `scripts/portfolio.py` performs CRUD operations and fetches live pricing by sending ticker symbols to a configured API endpoint (defaulting to api.aisa.one). The `SKILL.md` documentation includes defensive instructions explicitly forbidding the use of the skill for credential or cookie extraction, and no evidence of data exfiltration, malicious execution, or prompt injection was found.
能力标签
能力评估
Purpose & Capability
Name/description match the code: it manages portfolios and retrieves live prices using an AISA-compatible API. Using AISA_API_KEY as the primary credential is appropriate. Slight oddity: price fetching is implemented by calling an OpenAI-compatible client (the script imports openai/OpenAI) to ask a model to return prices rather than calling a conventional market-data REST endpoint, which is a design choice but not inherently incompatible with the stated purpose.
Instruction Scope
SKILL.md instructs running python3 scripts/portfolio.py and to set AISA_API_KEY, but the runtime reads additional environment variables (AISA_BASE_URL, AISA_MODEL, CLAWDBOT_STATE_DIR) that are not declared in requires.env. The script sends ticker symbols and a prompt to the external AISA/OpenAI-compatible API (i.e., transmits user tickers to a remote service). The SKILL.md does not document Python package dependencies (the script requires the 'openai' library), so runtime behavior may differ from documentation.
Install Mechanism
This is an instruction-only package with a bundled script but no install spec. The script requires the 'openai' Python package (commented in the file) but SKILL.md and registry metadata do not declare or provide an install step. That mismatch increases friction and may cause unexpected failures or ad-hoc installs by the operator.
Credentials
Only AISA_API_KEY is declared and used as the primary credential, which is proportional to contacting the AISA service. However the code also reads AISA_BASE_URL and AISA_MODEL (and accepts CLAWDBOT_STATE_DIR for state location) without those env vars being declared in the skill metadata; the undeclared env vars are not high privilege, but their use is an omission in the manifest.
Persistence & Privilege
always:false and user-invocable:true. The script stores state under a repo-local ./.clawdbot/... path (or an override via CLAWDBOT_STATE_DIR). It does not request system-wide changes or modify other skills' configurations. No elevated persistence privileges requested.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install stock-portfolio-aisa - 安装完成后，直接呼叫该 Skill 的名称或使用
/stock-portfolio-aisa触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
- Major simplification and refocus: skill now dedicated to portfolio management using live AISA pricing and P&L.
- Reduced footprint: substantial file cleanup, removing unused scripts and documentation.
- Only one main script retained: portfolio management now handled via `scripts/portfolio.py`.
- New environment variable (`AISA_API_KEY`) required for operation.
- Documentation updated: new quick start and concise guidance on when to use the skill, replacing previous detailed examples and API docs.
元数据
常见问题
stock-portfolio-aisa 是什么？
Create and manage stock crypto portfolios with live AISA pricing and P&L tracking. Use when: the user wants to add holdings, inspect portfolio performance, r... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 69 次。
如何安装 stock-portfolio-aisa？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install stock-portfolio-aisa」即可一键安装，无需额外配置。
stock-portfolio-aisa 是免费的吗？
是的，stock-portfolio-aisa 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
stock-portfolio-aisa 支持哪些平台？
stock-portfolio-aisa 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 stock-portfolio-aisa？
由 bibaofeng（@bibaofeng）开发并维护，当前版本 v1.0.0。
推荐 Skills