Tai Alpha Stock

Tai Alpha stock analysis — collect, VectorBT backtest (RSI/MACD/BB), conviction score, optional ML. Persistence is SQLite (default tai_alpha_output/tai_alpha...

This skill appears to do what it says (collect market data, run backtests, compute conviction scores, optionally run a small ML model and persist results to SQLite). Before installing/running: 1) Decide where you want the SQLite DB and pass --db-path or set TAI_ALPHA_DB_PATH/TAI_ALPHA_OUTPUT_DIR to avoid overwriting other files. 2) Do not set a Telegram webhook (TAI_ALPHA_TELEGRAM_WEBHOOK) or other webhook until you trust/verify the destination, because cron/alerts can send data externally. 3) The skill expects network access to Yahoo (yfinance) and optionally CoinGecko — run only in an environment where that network I/O is acceptable. 4) The registry metadata omits env var declarations that are used by the code/docs; consider treating those envs as secrets and review any values before use. 5) If you plan to run the publish script, note it will call npm and temporarily install clawdhub/undici — only run that if you intend to publish. If you want extra assurance, run the unit tests locally (pip install -e '.[dev]' and pytest) and inspect the specific scripts you plan to use (cron, alerts, or any code that posts to external endpoints).

Type: OpenClaw Skill Name: tai-alpha-stock Version: 1.33.1 The 'tai-alpha-stock' skill bundle is a comprehensive stock analysis tool that uses yfinance, VectorBT, and scikit-learn for data collection, backtesting, and conviction scoring. The code is well-structured, follows standard Python practices, and uses SQLite for local persistence. Analysis of the scripts (e.g., analyze.py, collect.py, hot_scanner.py) and the library modules (tai_alpha/) shows no evidence of data exfiltration, malicious execution, or prompt injection. A publishing script (setup/tools/clawdhub_publish.sh) includes a minor patch to a temporary npm dependency to increase an upload timeout, which is a documented functional fix and not malicious. The instructions in SKILL.md are purely operational and aligned with the tool's stated purpose.