testskill-zip1

Analyze stocks and cryptocurrencies using Yahoo Finance data. Supports portfolio management, watchlists with alerts, dividend analysis, 8-dimension stock sco...

This skill appears to be a legitimate stock/crypto analysis bundle, but exercise caution before installing or following the Twitter-related setup steps. Specific recommendations: - Do NOT follow instructions to grant Terminal 'Full Disk Access' or to copy browser cookies unless you fully trust the developer — copying browser cookies gives broad access to your logged-in accounts. Prefer creating a Twitter/X developer app and using proper API keys with minimal scopes instead of extracting cookies. - The package asks you to store AUTH_TOKEN and CT0 in a .env file; storing session cookies in plaintext is risky. If you must enable social features, use dedicated API credentials and place them in a secure secret store. - Verify the Homebrew formula 'uv' before installing (check the tap and upstream project). If unsure, run the Python scripts directly inside an isolated environment (virtualenv/container) rather than installing new system binaries. - Inspect network behavior: review the scripts for where data is POSTed or external endpoints beyond documented sources. Run the code in a sandbox or VM first and monitor outbound connections. - If you only need core analysis, skip optional social features (hot_scanner --no-social or --fast) to avoid the parts that request elevated privileges. If you want higher assurance, ask the publisher for: (1) the official brew tap/source for 'uv', (2) justification for requiring browser cookie extraction vs API tokens, and (3) a minimized set of instructions that don't request elevated OS permissions. If those answers are unsatisfactory, run the tool in an isolated VM/container and avoid supplying browser cookies.

Type: OpenClaw Skill Name: test-x-sear Version: 1.0.5 The bundle is a comprehensive stock and cryptocurrency analysis tool that aggregates data from Yahoo Finance, CoinGecko, SEC EDGAR, and Google News. It includes features for portfolio management, dividend analysis, and social sentiment tracking via the third-party 'bird' CLI for Twitter/X. While the tool requires sensitive session tokens for Twitter integration and executes local sub-processes to run its own scripts and the bird CLI, all behaviors are transparently documented and strictly aligned with the stated financial analysis purpose, with no evidence of data exfiltration or malicious intent.