AI stock watchdog

Security

Daily monitoring for Indian equity holdings (NSE/BSE) using a documented severity rubric. Silent by default — only surfaces Sev-1 events (governance, cash flow, promoter/pledge, surveillance, earnings, flows). Includes quarterly checks, segment view for conglomerates, and guidance tracking.

Install

openclaw skills install ai-stock-watchdog

AI stock watchdog v2

Daily monitoring for NSE/BSE holdings against severity-rubric.md. Silence by default — notify only when a Sev-1 rule fires or the portfolio-health rules say so. Results depend on available sources and search quality; verify material facts yourself.

Skill directory convention

All data files live in the same directory as this SKILL.md file, referred to as {SKILL_DIR}. Resolve it to the actual absolute path at runtime.

Files:

{SKILL_DIR}/portfolio.json — holdings, watchlist, preferences, holding periods
{SKILL_DIR}/competitors.json — sector peers + conglomerate segment mapping
{SKILL_DIR}/severity-rubric.md — Sev-1/2/3 classification rules
{SKILL_DIR}/sources.md — data sources with search query templates
{SKILL_DIR}/state/last-run.json — alerts sent, results calendar, management guidance tracker, suppression log
{SKILL_DIR}/alerts/{YYYY-MM-DD}-*.md — archived alerts
{SKILL_DIR}/state/portfolio-backup-{TS}.json — auto-backups

Routing — pick which workflow to run

User message contains...	Run
portfolio.json `_first_run: true`, OR "set up stock monitor" / "start monitoring"	Onboarding Workflow
"I bought", "I sold", "add to portfolio", "trim", "exit", "update my portfolio", broker screenshot	Portfolio Update Workflow
"check my stocks", "morning brief", "scan", "anything I should know", scheduled run	Daily Monitoring Workflow
"portfolio health check", "how's my portfolio", "concentration risk"	Portfolio Health Check (then optionally Daily Monitoring)
Ambiguous	Ask the user which they want

Onboarding Workflow (first run)

portfolio.json starts with _first_run: true and empty holdings. Detect on first invocation. NEVER skip — always offer setup.

Onboard-1 — Greet & explain

Greet warmly. Explain in plain language:

It watches your Indian stocks every weekday morning.
It ONLY pings you when something genuinely critical happens — promoter selling, governance failures, cash flow deterioration, surveillance moves, big earnings misses.
It does deep quarterly analysis: not just headline numbers, but cash flow quality, segment trends, and whether management delivered what they promised.
Most days you'll hear nothing — that's the design.

Onboard-2 — Capture holdings

Use AskUserQuestion (if available) OR ask in chat:

"How would you like to share your portfolio?"

Drop a screenshot of my broker app (Zerodha, Groww, Upstox, Angel One, etc.)

Describe in text (e.g., "50 shares of XYZ at avg 1500, 10 shares of ABC at 2900")

Skip for now

Follow Update Workflow (Update-2+) for processing.

Onboard-3 — Capture preferences

Ask:

Investment horizon → short-term (<3 months) / medium-term (3–12 months) / long-term (1+ year)
Alert sensitivity → critical only (recommended) / critical + high / daily digest
Delivery → notify only on critical (recommended) / daily one-liner / live dashboard
Positive signals → include good news in alerts? (yes / no — default no, silence-first)

Save into portfolio.json → preferences.

Onboard-4 — Set up the daily schedule

Offer daily schedule for the Daily Monitoring Workflow every weekday at 8:30 AM IST.

If mcp__scheduled-tasks__create_scheduled_task is available: use it with cron 30 8 * * 1-5. This tool only creates a time-based cron trigger — no shell access.
If unavailable: tell the user to trigger manually ("check my stocks") or set their own reminder.

Onboard-5 — Baseline scan

Offer: "Want me to do a first-look scan now? I'll check the last 7 days of news, filings, promoter activity, and surveillance status for your holdings."

If yes, run Daily Monitoring Workflow once. If no, confirm setup done.

Onboard-6 — Mark complete

Set _first_run: false in portfolio.json. Save.

Portfolio Update Workflow

The user never edits portfolio.json. They describe changes or drop screenshots.

Update-1 — Detect intent

Buy: "I bought 50 shares at 1620", "picked up XYZ today"
Sell / Trim / Exit: "sold all my XYZ", "trimmed 20 of ABC", "booked profit on PQR"
Bulk update: screenshot + "update my holdings"
Watchlist: "add XYZ to watchlist"
Correction: "my avg for XYZ is actually 1640"

Update-2 — Gather information

Screenshot path

Read image using vision. Extract: ticker/company name, quantity, average buy price, broker.

Common layouts:

Zerodha Kite: Instrument | Qty | Avg. cost | LTP | Cur. val | P&L
Groww: ticker, qty, "Avg. ₹X", "Invested ₹Y"
Upstox / Angel One / ICICI Direct / Kotak Neo / other brokers: similar tabular

CRUCIAL: Before computing diff, ASK: "Is this your complete portfolio, or just additions/changes?" Default: layer onto existing. Never silently remove based on absence.

If truncated (scroll indicator, "+N more"), ask to scroll and re-upload.

Text path

Parse natural language:

Resolve company name → NSE ticker. If ambiguous, ASK. Many Indian company names map to multiple tickers (e.g., a group name may have 5+ listed entities). Always confirm before assuming.
"all" / "exited" → full sell
"trimmed 20" → subtract from current
"I now hold 30" → set, don't add
Missing price on buy → ASK. Never fabricate.

Sector & segment inference (when adding a new ticker)

Look up competitors.json → ticker_to_sector. If found, use it.
If not found, check sector_peers.
If still not found, web search "{TICKER} NSE sector industry".
For conglomerates (check conglomerate_segments key in competitors.json), also note the segment mapping for the ticker if it exists.
ADD the mapping to competitors.json. Never leave sector blank.

Record holding start date

When adding a new stock, record buy_date: "{YYYY-MM-DD}" in portfolio.json. This is used for:

STCG vs LTCG awareness (365-day boundary for equity)
Holding period context in alerts

Update-3 — Read current portfolio

Read {SKILL_DIR}/portfolio.json. Compute proposed new state.

Update-4 — Show diff & confirm (mandatory)

NEVER write without explicit confirmation:

Proposed portfolio update:

  ✱ ADD     {TICKER_A}  qty: 10     avg: ₹2,900   sector: {sector}
  ✏ UPDATE  {TICKER_B}  qty: 50→75  avg: ₹1,620→₹1,607 (weighted)
  ✗ REMOVE  {TICKER_C}  (full exit)

  Concentration check: {TICKER_A} would be 28% of portfolio — within limits.

Summary: +1 new, 1 increased, 1 exit. Net 2 holdings.

Apply? (yes / no / edit)

Wait for explicit confirmation.

Update-5 — Backup, then write

Copy current portfolio.json to {SKILL_DIR}/state/portfolio-backup-{YYYY-MM-DD-HHMMSS}.json
Write new portfolio.json preserving structure
Update competitors.json → ticker_to_sector for new tickers
Confirm: "Portfolio updated. {N} holdings, {M} on watchlist. Backup saved."

Update-6 — Weighted average (adding to existing)

new_avg = ((old_qty × old_avg) + (new_qty × new_price)) / (old_qty + new_qty)

Show the calculation. If user states explicit avg, use theirs.

Update-7 — Edge cases

Sell to zero: REMOVE entirely.
Sell more than held: STOP, ask.
Sell stock not in portfolio: STOP, ask.
Stock split / bonus: adjust qty × ratio, avg ÷ ratio. CONFIRM.
Renamed/merged tickers: confirm with user.
F&O / MF / ETF: not supported — tell user.
Buy without price: ASK.

Update-8 — Post-update offer

New holding → "Want a quick first-look scan of {TICKER}?"
New sector → "Added {sector} peers to monitoring."
Full exit → confirm only. If held >1 year: "Note: this was a long-term holding — gains qualify for LTCG (10% above ₹1.25 lakh)."

Portfolio Health Check

Run this before daily monitoring OR when user asks "how's my portfolio" / "portfolio health check". This catches structural risks the daily scan doesn't.

Health-1 — Concentration risk

Any single stock >30% of invested value → FLAG as concentration risk
Any single sector >40% of invested value → FLAG as sector overweight
Report: "Your portfolio has {N} holdings across {M} sectors. Largest position: {TICKER} at {X}% of invested value."

Health-2 — Correlation check

If 3+ holdings in same sector, note: "You have high {sector} correlation. A sector-wide event would hit {X}% of your portfolio."
If 2+ holdings in same promoter group (Tata group, Adani group), note the group concentration.

Health-3 — Liquidity check

If any held stock has average daily volume <₹5 crore, flag: "Exit may be difficult for {TICKER} — average daily volume is only ₹{X} crore."

Health-4 — Holding period tracker

For each stock, compute days held since buy_date.
Flag stocks approaching LTCG boundary (between 300–365 days): "Note: {TICKER} held for {N} days. LTCG threshold in {365-N} days — trimming before would mean STCG (20%)."
Stocks held >365 days: note "LTCG eligible" in any exit recommendations.

Health-5 — Unrealized P&L awareness

If current price data is available from scan:

Flag stocks with >30% unrealized loss held >180 days: "You're sitting on a {X}% unrealized loss on {TICKER} for {N} days. This may be anchoring bias."
Flag stocks with >50% unrealized gain: "Consider whether {TICKER}'s position size (now {X}% of portfolio due to appreciation) warrants a trim."

Daily Monitoring Workflow

You apply this skill's rubric to Indian equities. Job: silence by default. Only surface when a Sev-1 trigger matches severity-rubric.md (plus the notify rules below). False positives erode trust faster than missed noise.

Step 1 — Setup & portfolio health

Read {SKILL_DIR}/portfolio.json. If _first_run: true OR holdings empty → route to Onboarding.
Pull every ticker in holdings.
Look up each ticker's sector and segment mapping in competitors.json. Build peer set.
Read {SKILL_DIR}/state/last-run.json for alert history and management guidance tracker.
Note today's date in IST.
Run Portfolio Health Check (Health-1 through Health-3 only — skip Health-4/5 in automated mode unless concentration risk found).

Step 2 — India market calendar check

Before stock-level scanning, check:

2a. Is today a market holiday?

If NSE is closed today (Republic Day, Holi, Diwali, etc.), skip the scan. Update state with "market_holiday" and exit.

2b. Macro events today/this week

Quick search for:

RBI MPC decision (if this is an MPC week) → impacts all bank/NBFC holdings
Union Budget (if Feb 1 window) → impacts everything
GST Council meeting → impacts FMCG, cement, auto
F&O monthly expiry (last Thursday) → note elevated volatility context

2c. Pre-market global cues

Search: US close (Dow/Nasdaq/S&P), GIFT Nifty, Brent crude, USD/INR, US 10Y yield, India VIX.

Only flag if global shock directly maps to a holding:

Crude up >5% with oil & gas / refining stocks held → flag (for diversified refiners, note that GRM benefits while petchem margins may compress)
USD/INR sharp move (>1%) with IT / pharma export stocks → flag tailwind/headwind
US 10Y yield spike >20bps → FII outflow risk, flag for all holdings

Step 3 — Per-stock daily scan

For each held ticker, run in parallel:

3a. Exchange announcements (last 24h)

Search: site:nseindia.com "{COMPANY_NAME}" announcement, site:bseindia.com "{COMPANY_NAME}". Look for: results dates, board meetings, auditor changes, KMP exits, credit rating actions, pledge disclosures, SAST/PIT filings, corporate governance reports, scheme of arrangement.

3b. News scan (last 24h)

"{COMPANY_NAME}" news last 1 day — prefer Moneycontrol / ET / Reuters / Mint / Business Standard
"{COMPANY_NAME}" SEBI last 7 days
"{COMPANY_NAME}" ED CBI "income tax" raid last 30 days (only if NEW)
"{COMPANY_NAME}" downgrade last 7 days
"{COMPANY_NAME}" fraud whistleblower "forensic audit" last 90 days (only if NEW)

3c. Promoter & institutional activity

Promoter holding & pledge (check against latest quarterly shareholding pattern):

Search: "{COMPANY_NAME}" promoter holding or "{TICKER}" shareholding pattern
Compare with previous quarter stored in state. Flag per severity-rubric.md Section A.
If near a quarterly filing deadline (21 days post quarter-end), actively look for fresh filing.

Insider trading disclosures (last 7 days):

Search: "{TICKER}" insider trading SAST PIT disclosure site:nseindia.com
Flag KMP sales, especially pre-results.

Block/bulk deals (last 24h):

Search: "{TICKER}" block deal bulk deal
Decode: is the seller a promoter entity, FII, PE fund, or retail? Promoter selling = Sev-1.

FII/MF holding changes (when quarterly data available):

Compare latest quarter vs previous from Trendlyne or Screener.
FII cut >2pp = Sev-1. MF net selling >0.5% = Sev-2.

3d. Surveillance & price action

GSM/ASM status: search "{TICKER}" GSM ASM surveillance. Cache 7 days.
F&O ban list (if near expiry week): check NSE F&O ban page.
52-week low yesterday? Flag if on >2x average volume.
Volume vs 20-day average — flag if >3x with negative move.

3e. Sector & peer activity (per unique sector, last 24h)

For each sector:

Did any peer announce results, guidance, or material news?
Did a sector regulator issue anything? (RBI for banks, USFDA for pharma, TRAI for telecom, PNGRB for gas)
Cross-map peer concerns: 2+ peer Sev-1 in 7 days = industry stress trigger.

3f. Upcoming results check

Has the company announced next results date? Track in state/last-run.json → results_calendar.
If results declared in last 24h → trigger Quarterly Deep-Dive (Step 5).
If results due within 7 days → note "results watch" (no alert, but heightened sensitivity).

3g. Conglomerate segment check (for multi-business companies)

If the ticker is flagged as a conglomerate in competitors.json → conglomerate_segments:

Look up the segment definitions and key_metrics for each segment in the data file.
Search for segment-specific news using those key metrics (e.g., refining margins for O2C segments, subscriber data for telecom segments, store count for retail segments).
A segment turning loss-making or cross-subsidy pattern = Sev-1.

Step 4 — Severity classification

Classify each signal against severity-rubric.md. Apply context modifiers:

Peer-relative adjustment (sector-wide fall reduces individual severity)
Horizon adjustment (short-term → elevate price triggers; long-term → demote price, elevate fundamental)
Position size adjustment (>25% of portfolio → elevate Sev-2 to Sev-1)
Market regime adjustment (broad correction → raise price thresholds)

Suppression rule: If already alerted on same signal_id in last 14 days, suppress.

Step 5 — Quarterly Deep-Dive (when results are out)

Quarterly deep-dive should cover cash flow quality and segment trends, not only headline PAT and EPS vs consensus.

5a. Headline numbers

Pull from BSE/NSE filing, Screener, or Trendlyne:

Revenue: YoY %, QoQ %
EBITDA: absolute, margin (bps change QoQ and YoY)
PAT: YoY %, QoQ %
EPS vs consensus

5b. Cash flow quality check (most underrated — catches manipulation)

Pull cash flow statement (Screener cash flow tab or filing):

CFO vs PAT: compute CFO/PAT ratio. Below 0.5x for 2+ quarters = Sev-1.
CFO trend: is CFO growing in line with PAT? If PAT up 20% but CFO flat = red flag.
Free cash flow: CFO minus capex. Negative FCF for 3+ quarters in a non-capex-cycle company = Sev-2.
Working capital changes: large working capital build draining CFO = Sev-1 if receivables/inventory growing >2x revenue.

5c. Balance sheet quality

Net debt: QoQ change. Debt increasing while profits grow = fund-flow mismatch.
Debt maturity: >30% maturing within 12 months with weak CFO = refinancing risk.
Interest coverage: EBITDA/interest expense. Below 1.5x = Sev-1.
Contingent liabilities: compare vs previous year. Sharp jump = potential hidden risk.
Related party transactions: jumped >50% YoY without proportionate revenue = Sev-1.
Trade receivables: absolute growth and days outstanding. Over 90 days = collection risk.
Inventory days: rising faster than revenue = demand slowdown or channel stuffing.

5d. Segment-wise analysis (critical for conglomerates)

For companies with multiple reported segments (refer to conglomerate_segments in competitors.json for segment definitions):

Revenue and EBIT per segment vs previous quarter and same quarter last year.
Any segment turned EBIT-negative? → Sev-1.
Cross-subsidization pattern: profitable segment margin declining while loss-making segment scales → flag.
Use key_metrics from the conglomerate_segments data to know which numbers to pull for each segment.

5e. Vs consensus

Pull consensus from Trendlyne or Moneycontrol:

Revenue miss >15% = Sev-1. Miss 10–15% = Sev-2.
PAT miss >25% = Sev-1. Miss 15–25% = Sev-2.
Margin miss >200 bps = Sev-2. Miss >400 bps = Sev-1.

5f. Concall analysis

Locate transcript (Screener Documents tab or company IR):

Guidance tracking: what did management guide last quarter? Extract specific numbers (revenue growth %, margin target, capex plan, order book target). Compare with actuals. If missed >30% of guided number → management credibility drops. Record in state/last-run.json → guidance_tracker.
Forward guidance: extract new guidance numbers. Store for next quarter comparison.
Tone analysis: compare language with previous 2 concalls. "Confident/strong" → "cautious/watchful" = Sev-2 (Sev-1 if combined with earnings miss).
Specific red flag phrases: "challenging environment", "one-off", "non-recurring" (used 2+ quarters = it's recurring), "right-sizing", "restructuring charges", "deferred revenue recognition".
Analyst pushback: if multiple analysts question the same metric (receivables, related party, cash flow) — that's smart money flagging something.
Duration/access: significantly shorter concall or fewer questions taken = management avoiding scrutiny.

5g. Banking-specific quarterly checks (for bank / NBFC holdings)

NIM (Net Interest Margin): QoQ bps change. Compression >10 bps = note. >20 bps = Sev-2.
CASA ratio: declining = higher cost of funds ahead.
GNPA / NNPA: absolute and ratio. Any uptick = note. Sharp uptick from a low base = Sev-2.
Slippage ratio: fresh slippages as % of opening standard advances. Rising = Sev-2.
Credit cost: provisions as % of average advances.
CD ratio (Credit-Deposit): above 80% = aggressive lending. Above 85% = risk flag.
PCR (Provision Coverage Ratio): declining = less buffer for future shocks.
If the bank has undergone a recent merger, also track: merged book integration, loan-to-deposit ratio normalization, PSL compliance, and synergy realization.

5h. Build verdict

One-line verdict: ACCUMULATE / HOLD / WATCH / EXIT BIAS
Why (3 bullets max)
Counter-view (1 bullet — always include)
Action: specific for this week, based on user's horizon
Management credibility: HIGH / MEDIUM / LOW (based on guidance delivery history)

Step 6 — Quarterly for peers

Same as Step 5 but summarized: one paragraph per peer (QoQ delta + concall tone). Sector-level read: "Industry trend: {strong / mixed / weak / deteriorating}."

Surface ONLY if it changes the read on a held stock.

Step 7 — Decide whether to notify

Notify only if:

≥1 Sev-1 trigger on a held stock not flagged in last 14 days, OR
≥2 Sev-1 triggers across peers in same sector within 7 days (industry stress), OR
Quarterly deep-dive concluded EXIT BIAS or WATCH, OR
Portfolio health found >30% concentration in a stock with any Sev-2+ signal.

Otherwise — update state and exit silently.

EXCEPTION: if delivery = daily_brief, always post a one-liner: "All clear — no Sev-1 across {N} holdings as of {time}."

Step 8 — Notification format

Save to {SKILL_DIR}/alerts/{YYYY-MM-DD}-alert.md AND surface in chat:

🔴 STOCK ALERT — {date}

{TICKER} — {one-line headline}
Severity: Sev-1 | Category: {rubric section} | Sector: {sector}

What happened:
{2-3 lines, factual, with specific numbers}

Why it matters for YOU ({horizon} holder, avg ₹{avg_price}, {N} shares):
- {bullet 1 — direct portfolio impact}
- {bullet 2 — what this historically leads to}

Suggested action: {Hold / Watch closely / Trim / Exit bias}
Confidence: {High / Medium / Low}
Management credibility: {High / Medium / Low} (based on {N} quarters tracked)

Sources:
- [Title](URL)
- [Title](URL)

Counter-view: {one line — what could make this NOT critical}

Portfolio impact: This holding is {X}% of your portfolio. {If concentrated: "Given your concentrated position, consider this signal with extra weight."}

If multiple stocks triggered, repeat per ticker. Group by severity.

Step 9 — State update

Update {SKILL_DIR}/state/last-run.json:

last_run_date: today's date
alerts_sent: append any new alerts with signal_id and timestamp
results_calendar: update upcoming/past results dates
guidance_tracker: store management guidance numbers for forward comparison
promoter_holding_history: store latest promoter holding % and pledge % per ticker
institutional_holding_history: FII %, DII %, MF holding % per ticker
management_credibility: running score per company based on guidance vs actual
surveillance_check: last checked date, any active GSM/ASM entries

Hard rules

NEVER provide buy/sell as financial advice. Frame as "based on rubric, signal suggests…" Remind: informational only, not SEBI-registered.
NEVER hallucinate. If can't verify via a source, say "could not verify — check directly."
ALWAYS cite sources at the bottom of any alert with markdown links.
NEVER repeat an alert already sent in last 14 days for the same signal_id.
Default to silence. Most days have nothing to say.
NEVER write portfolio.json without showing diff and getting explicit confirmation.
ALWAYS back up portfolio.json before writing.
If _first_run: true or holdings empty → route to Onboarding.
Indian markets only — NSE & BSE. All times in IST.
For short-term holders: elevate block deals, volume anomalies, 52W low, F&O ban signals.
For long-term holders: elevate cash flow quality, governance, promoter pledge, management credibility signals. Demote single-day price moves.
NEVER ignore cash flow quality. A company reporting growing profits with declining/negative operating cash flow is the single most common pattern before Indian accounting frauds.
For conglomerates: always do segment-level analysis. Consolidated numbers can hide a dying segment behind a thriving one.
Track management guidance and hold them accountable. Two consecutive quarters of missing own guidance = downgrade credibility rating.

Manual invocation

User can trigger ad-hoc:

"Check my stocks"
"Stock morning brief"
"Run portfolio scan"
"Portfolio health check"
"How's my portfolio"
"Anything I should know about my holdings?"

In ad-hoc mode, run same workflow but if nothing critical, give a one-liner: "All clear — no Sev-1 triggers across {N} holdings as of {time}." rather than total silence.