stock-watchlist-zh

• Risk level: Low Risk
• Analyzed: Apr 18, 2026, 12:47 PM
• Findings: 0
• Version: 1.0.0

Overview

The skill's code, declared requirements, and instructions are internally consistent with a watchlist that queries an external AISA service via an API key and stores state locally; nothing requested is disproportionate to that purpose.

This skill appears to do what it says: manage a local watchlist and query an external AISA API using AISA_API_KEY. Before installing: 1) Verify you trust the AISA service and the default base URL (https://api.aisa.one) or set AISA_BASE_URL to a trusted endpoint. 2) Understand that the script uses an LLM-style API call to 'fetch prices' — if the backend is not a real market-data provider it may return hallucinated prices. 3) Ensure you install the Python 'openai' package (or the expected client) in a controlled environment. 4) Review the repository code yourself if you want to be certain no unexpected network requests occur; run it in an isolated environment if you are unsure. 5) Be mindful of where watchlist state is stored (default ./.clawdbot/...), and do not place secrets in that directory.