Portfolio Watcher
PassAudited by VirusTotal on May 12, 2026.
Overview
Type: OpenClaw Skill Name: portfolio-watcher Version: 1.0.0 The skill bundle contains standard metadata in `_meta.json` and a `SKILL.md` file that clearly describes a portfolio tracking skill. There is no evidence of prompt injection attempts against the AI agent, malicious execution, data exfiltration, or any other high-risk behaviors. The content is entirely aligned with the stated purpose of monitoring stock/crypto holdings.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Your investment holdings and purchase prices can be personal financial information; if remembered in chat history or agent memory, others with access could learn details about your portfolio.
The skill invites users to provide portfolio holdings, cost basis, and alert targets, and its tracking/alerting purpose implies that this information may be retained or reused in later interactions.
Tracks your stock and crypto holdings ... "I own 50 shares of AAPL at $150" ... "Alert me if AAPL hits $200"
Only share portfolio details you are comfortable storing in the agent context, avoid account numbers or brokerage credentials, and ask to remove or update stored holdings when needed.
If you rely on the skill for time-sensitive investment decisions, prices or alerts may be delayed, unavailable, or dependent on whatever tools the host agent has.
The skill advertises timely market prices and alerts, but the artifact does not identify a market-data source or notification mechanism, so users should not assume guaranteed real-time monitoring.
Real-time prices, alerts, and performance tracking ... Prices update every few minutes (not real-time streaming)
Treat outputs as informational only, verify prices with a trusted market-data source, and do not rely on this skill as the sole source for urgent trading or risk decisions.