stock watch

Query real-time stock prices, basic quote fields, and manage a Markdown watchlist for A-share, Hong Kong, and US stocks. Use when users ask in Chinese or by...

This skill appears coherent and limited in scope, but review these practical points before installing: - Network calls: the script queries third-party Eastmoney endpoints to resolve names and fetch quotes. Do not put secrets or sensitive content into queries or the watchlist file if you are concerned about outbound data. - Local file safety: by default the script only allows watchlist files inside the current working directory; you can expand allowed roots via STOCK_WATCHLIST_ALLOWED_ROOTS, but only add directories you trust. The code enforces Markdown extensions and marker comments. - Dependencies: ensure you run it in a Python environment with the 'requests' package installed. Review the included scripts if you need stronger guarantees (they are provided in the repo). - Hard-coded token: the code contains a hard-coded SEARCH_TOKEN constant for the Eastmoney search API; this is expected for the current implementation but is not a secret coming from you. - Autonomous invocation: the skill is user-invocable and not set to always:true. The platform may allow autonomous invocation by default; if you are worried about automatic runs, check platform controls for skill invocation. If you want higher assurance, inspect the full scripts (they are included) or run them in an isolated environment where network/file access can be monitored.

Type: OpenClaw Skill Name: stock-watchlist Version: 1.1.0 The stock-watchlist skill is a legitimate tool for querying real-time stock data from EastMoney APIs and managing a Markdown-based watchlist. The Python script (scripts/stock_watchlist.py) includes robust security practices, such as path validation to prevent directory traversal and restricting file operations to the current working directory or an environment-defined allowlist. No evidence of data exfiltration, malicious execution, or prompt injection was found.