Stock Monitor Skill 0.1.0

PassAudited by ClawScan on May 10, 2026.

Overview

This appears to be a stock-alert tool, but it runs a user-started background monitor and has some provenance/setup inconsistencies to review.

Before installing, verify the publisher/version, inspect or adjust the hardcoded watchlist and costs, install required Python dependencies, and only start the daemon if you want it to keep running in the background. Treat any trading suggestions as alerts to review, not as financial instructions.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If started, the monitor will continue making scheduled market-data checks and writing logs until it is stopped.

Why it was flagged

The skill starts a background daemon and records its PID so it can continue monitoring after the initial command returns.

Skill content
nohup python3 "$SCRIPT_DIR/monitor_daemon.py" > "$LOG_DIR/monitor.log" 2>&1 &
echo $! > "$PID_FILE"
Recommendation

Start it only if you want continuous monitoring, and use ./control.sh status, log, and stop to supervise or terminate it.

What this means

It is harder to verify exactly which publisher/version produced this package.

Why it was flagged

The embedded metadata differs from the supplied registry metadata, which lists a different owner ID, slug, and version. The source is also listed as unknown.

Skill content
"ownerId": "kn70aj13hr3z4fpmfk1y2jmpz181gn2z", "slug": "stock-monitor-skill", "version": "0.1.0"
Recommendation

Verify the skill source and publisher before relying on it, especially because it runs local scripts persistently.

What this means

Setup may fail or require users to edit hardcoded configuration manually, increasing the chance of running an unintended or modified local copy.

Why it was flagged

The README references config.example.py, but that file is not present in the supplied manifest.

Skill content
cp config.example.py config.py
Recommendation

Check the package contents before running it and confirm how holdings/cost settings should be configured.

What this means

Users may be tempted to trade based on automated alerts or recommendations.

Why it was flagged

The skill produces investment-style recommendations. This is aligned with its stock-monitoring purpose and the document includes cautionary usage tips, but the advice could influence financial decisions.

Skill content
💡 Kimi建议:
🚀 多条件共振,趋势强劲,可考虑继续持有或分批减仓。
Recommendation

Treat alerts as informational, verify market data independently, and do not make trades solely because the skill recommends them.