Stock Price Alert

股价异动实时提醒技能，支持对接股票行情接口、邮件提醒和Sonos语音播报，实时监控持仓股票价格波动并触发告警

This skill appears to implement the advertised stock-monitoring + Gmail + Sonos alerts, but there are a few red flags you should check before installing: - Verify why the registry requires the 'clawhub' binary; the Python script does not reference it. Ask the publisher to justify or remove that requirement. - The script expects a Gmail OAuth token (token.json) and will look in several relative and workspace-wide paths (including ../../../config/token.json and ~/.openclaw/workspace/config/token.json). Ensure you do not have sensitive tokens in those locations you don't want this skill to access, or run the skill in an isolated environment. - Provide Gmail credentials only as described (create a dedicated token.json for this skill) and never expose tokens you use for other services. - Inspect the full script locally (especially the parts that search for token.json and call subprocess for Sonos) before running, and run first in a restricted or VM environment if you are unsure. - Confirm you are comfortable with the pip packages listed (yfinance, pandas, google auth libs) and install them yourself to avoid unexpected network installs. If the publisher can (a) remove the unexplained 'clawhub' requirement, (b) document the exact credential files/paths needed, or (c) limit token discovery to a single explicit path you control, the transparency and safety of this skill would improve.

Type: OpenClaw Skill Name: stock-price-alert Version: 1.0.1 The stock-price-alert skill is a legitimate tool for monitoring stock market fluctuations and sending notifications via Gmail and Sonos. The code in scripts/stock_price_alert.py uses standard libraries like yfinance and the Google API client to perform its stated functions, and while it handles sensitive Gmail API tokens and uses subprocess to call the Sonos CLI, these actions are well-documented and directly support the skill's purpose without evidence of malicious intent or data exfiltration.