Stock Monitor Pro

PassAudited by ClawScan on May 10, 2026.

Overview

This appears to be a disclosed stock-alert monitor, but it runs as a background process, contacts finance data providers, and needs user customization before use.

Install only if you want a local stock-alert daemon. Customize the watchlist and cost values before running, understand that monitored symbols are queried through external market-data providers, and stop the background process when you no longer need it. The central monitor files were partially truncated in the provided review context, so inspect the installed scripts before long-term use.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If started, the monitor will keep polling and logging until the user stops it.

Why it was flagged

The start command launches a background monitor and redirects output to a persistent log. This matches the documented monitoring purpose and includes stop/status controls, but it continues running after the initiating interaction.

Skill content
nohup python3 "$SCRIPT_DIR/monitor_v2.py" > "$LOG_DIR/monitor.log" 2>&1 &
Recommendation

Only run start when you want a persistent monitor, and use ./control.sh stop/status/log to manage it.

What this means

External providers may see which stock or ETF symbols are being monitored.

Why it was flagged

The configured stock symbols are sent to external finance quote providers. This is expected for market monitoring, but a customized watchlist may reveal the user's investment interests.

Skill content
codes = [f"{s['market']}{s['code']}" for s in stock_list]; url = f"https://hq.sinajs.cn/list={','.join(codes)}"
Recommendation

Use only watchlists you are comfortable querying through Sina/Tencent/Eastmoney-style public data services.

What this means

Running the test suite may not test the installed skill and could execute unexpected local code from that path.

Why it was flagged

The test suite inserts a developer-specific absolute path before importing the monitor module. If run on a system where that path exists, tests could import code outside the installed skill package.

Skill content
sys.path.insert(0, '/home/wesley/.openclaw/workspace/skills/stock-monitor/scripts')
Recommendation

Do not run the test suite unless the import path is changed to a relative path inside the installed skill.

What this means

If run unchanged, the monitor may generate alerts and suggestions for someone else's portfolio assumptions.

Why it was flagged

The default configuration is labeled as the author's holdings and includes strategy-like thresholds. This is visible in code, but users could mistake the default alerts for their own personalized setup.

Skill content
# ===== Eave的持仓ETF ===== ... "note": "策略:涨到¥0.45减仓50%,跌破¥0.40止损"
Recommendation

Edit the watchlist, cost basis, and thresholds before starting the monitor, and treat generated suggestions as informational rather than financial advice.