Stock Select

AI驱动的智能选股与交易助手。自然语言选股（如"涨停股"、"主力净流入>10%"），Level2主力资金数据，集合竞价异动监控，多券商账户管理与AI辅助下单。让选股→分析→交易一站式完成。触发词：选股、问财、股票查询、主力资金、大单净额、涨停、集合竞价、股票行情、交易下单。

This skill will ask the agent to send usernames/passwords and JWT tokens to an external service (api.stockbot.me) and references an environment variable (STOCKBOOT_API_URL) even though the registry declares none. Before installing or using: 1) Do not enter real brokerage credentials until you trust the operator — try a read-only or demo account first. 2) Ask the publisher to update metadata to declare required env vars (STOCKBOOT_API_URL) and the primary credential name, and to provide a privacy/security policy explaining how tokens are stored/used and retained. 3) Prefer self-hosting (set STOCKBOOT_API_URL to your own audited backend) if you will perform real trades. 4) Verify TLS/HTTPS and the service's identity (homepage/source are unknown). 5) If you must test, create a throwaway account with minimal funds. If the publisher cannot clarify or provide auditable server code or an explicit privacy policy, treat the skill as untrusted for real trading/credential use.

Type: OpenClaw Skill Name: stock-select Version: 2.0.2 The skill facilitates stock trading and account management by requiring users to provide sensitive credentials, including passwords and SMS verification codes, to an external API (api.stockbot.me). While these capabilities are consistent with the stated purpose of a trading assistant, the handling of financial authentication tokens and the execution of trades via an AI agent represent high-risk behaviors. No explicit evidence of malicious intent or data exfiltration beyond the documented service was found in SKILL.md, but the potential for credential harvesting or unauthorized financial transactions warrants a suspicious classification.