Tvscreener

Query TradingView screener data for HK, A-share, A-share ETF, and US symbols with deepentropy/tvscreener. Use for stock lookup, technical indicators (price/change/RSI/MACD/volume), symbol filtering, and custom field/filter-based market queries.

This skill appears coherent and only depends on the public tvscreener package. Before installing/running: (1) confirm you trust the tvscreener PyPI package (review its PyPI/project page and recent releases), since the scripts will pip-install it and it will make network requests to retrieve data; (2) avoid running the pip install as root or in environments containing other critical software—use a dedicated virtualenv/venv; (3) the scripts can write CSVs to paths you pass with --csv—avoid supplying sensitive filesystem locations; (4) no credentials are required by the skill itself, but be mindful of your environment (don't run in a container/session that already holds sensitive API tokens). If you want further assurance, inspect the tvscreener package source on PyPI/GitHub before installing.

Type: OpenClaw Skill Name: tvscreener Version: 1.0.0 The skill bundle is classified as suspicious due to an arbitrary file write vulnerability. The scripts `scripts/custom_query.py` and `scripts/query_symbol.py` both accept a `--csv` argument, which allows a user to specify an arbitrary file path to write the query results. This could be exploited to overwrite sensitive files on the system if the agent has sufficient permissions. There is no evidence of malicious intent such as data exfiltration, backdoor installation, or prompt injection against the agent to perform unauthorized actions.