Stock Tools
v1.0.3自选股管理与A股行情对话能力。Use when the user asks in natural language to add/remove/list/clear watchlist stocks, or asks about a stock / watchlist行情、涨跌幅、走势、表现、概览，例如“添加 0...
⭐ 0· 228·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (watchlist management and stock Q&A) align with the provided code and SKILL.md. The bundled script implements add/remove/list/clear operations against a local stocks-data/stocklist.txt file and validates stock codes, which is appropriate for the stated purpose.
Instruction Scope
SKILL.md carefully limits local operations to persisting the watchlist and states that market data should be fetched from public sources or answered by the model. That is consistent overall, but there is minor ambiguity: some lines imply 'turn into a script to fetch行情' while the included script explicitly contains no networking. Also the CLI supports a --file argument that allows any resolved path, so a careless agent invocation could read or write an arbitrary file outside the intended stocks-data directory. The skill itself does not attempt to exfiltrate data or contact external endpoints.
Install Mechanism
No install spec and no external downloads; the skill is instruction + a small local script. Nothing is written to disk by an installer beyond the script already present in the package.
Credentials
No environment variables, credentials, or config paths are requested. The required privileges (read/write a local file in the workspace) are proportional to the watchlist-management purpose.
Persistence & Privilege
always is false and the skill only persists its own watchlist file. It does not modify other skills or system-wide settings. Autonomous invocation is allowed by default but not combined with broad credentials or elevated privileges.
Assessment
This skill appears to do what it says: manage a local watchlist file and let the model handle market Q&A. Before installing, consider these practical points: (1) confirm your agent runtime isolates workspace files — the script accepts a --file path, so a prompt or agent action could point it at arbitrary files if not sandboxed; (2) the script itself does not contact the network, but the SKILL.md asks the model to fetch public行情 pages when asked for latest prices — verify whether your agent/model is allowed to make external requests and which endpoints it will use; (3) if you want tighter safety, restrict the agent to the default stocks-data/stocklist.txt path (or inspect/validate any --file argument) and back up the file before use. Overall the package is internally consistent and low-risk if run in a properly sandboxed agent environment.Like a lobster shell, security has layers — review code before you run it.
latestvk978cdjevxr69bt3keqba5yqgd83s4qc
License
MIT-0
Free to use, modify, and redistribute. No attribution required.