trading-log

交易日志记录系统——记录所有买卖交易、计算持仓盈亏、自动刷实时行情。When the user mentions buying/selling stocks, recording trades, checking positions, or calculating profit/loss.

This skill appears to implement a local trading log and fetches realtime prices from Tencent (qt.gtimg.cn), which matches its description — but there are inconsistencies you should resolve before using it. Specifically: (1) the documentation and manifest reference different filenames than the shipped script, and the script uses a hardcoded path (/home/jocob/Desktop/...) rather than the ~/Desktop path described; confirm and correct the file locations so it reads/writes where you expect. (2) The skill will create persistent JSON files containing your trades; if you care about privacy or retention, inspect the save/load functions and change paths or add deletion/backup policies. (3) It makes outbound HTTP requests only to a known public price API (qt.gtimg.cn) — if you require stricter network controls, run it in a sandboxed environment or block network access. (4) Because SKILL.md mentions automatic Cron triggers but provides no installer for scheduling, verify how your agent will schedule runs before enabling autonomous invocation. If you want to proceed, run the script locally in a controlled folder (not someone else's /home), review the code yourself (or have a developer do so), and fix the path/filename inconsistencies.

Type: OpenClaw Skill Name: trading-log Version: 1.0.0 The trading-log skill is a legitimate utility for tracking stock trades and calculating profit/loss. It fetches real-time market data from a public Tencent Finance API (qt.gtimg.cn) and manages local JSON data files. While it contains hardcoded file paths for a specific user ('jocob') in scripts/trading_log.py, there is no evidence of data exfiltration, malicious execution, or prompt injection.