Vnstock Environment Setup for Python Vibe Coding

Comprehensive environment diagnostic, setup, and agent guide installation for the Vnstock ecosystem (Free or Sponsored). Validates OS, Python, venv, and perf...

This skill appears to do what it claims (diagnose environment and install an Agent Guide) but it is intrusive and includes higher-risk operations. Before running it, consider these precautions: - Inspect remote resources first: manually open https://vnstocks.com/files/requirements.txt and the installer script rather than piping curl/wget into bash. Prefer downloading and reviewing files before execution. - Avoid passing secrets on the command line (the example --api-key "API_KEY" will appear in process lists). Use a secure credential mechanism if required and ask the installer vendor for a safer method. - Back up your repository and .agents/skills and docs/ before running the script (the script can delete and replace these directories). The setup script will attempt git commits, but you should create an independent backup. - Verify the GitHub repo (https://github.com/vnstock-hq/vnstock-agent-guide.git) contents yourself to ensure it is legitimate and review what will be copied into your workspace. - Prefer running the diagnostic script only (scripts/diagnostics.py) first in an isolated environment (container or temp clone) to see results without modifying files. - Be cautious if you allow an autonomous agent to invoke this skill: it can run sudo, install packages, overwrite files, and replace other skills. Only grant autonomous use if you fully trust the skill source. If you want, I can: (1) fetch and show the contents of the remote requirements/installer (if you provide permission), (2) suggest a safer sequence of manual commands to apply, or (3) run a dry-run checklist to identify exactly what would be overwritten and what network calls would be made.

Type: OpenClaw Skill Name: vnstock-env-setup Version: 1.0.0 The skill bundle performs high-risk environment setup operations, including executing remote shell scripts via 'curl | bash' and 'wget | bash' from vnstocks.com (SKILL.md). The setup_agent_guide.py script downloads and executes a binary Git installer on Windows using silent flags and clones a remote repository (github.com/vnstock-hq/vnstock-agent-guide.git) to overwrite local workspace directories, including other skill bundles. While these actions are consistent with the stated purpose of a setup utility, the reliance on unverified remote execution and automated workspace modification poses a significant security risk.