Stock Monitor - 股票监控
v1.0.4对持仓做一次性检查:盈亏、涨跌、缺口、均线与 RSI 等(无常驻进程,可配阈值与状态文件)。当用户说:帮我检查一下持仓要不要告警?我的 ETF 今天触发止损了吗?或类似持仓体检问题时,使用本技能。
⭐ 5· 124·0 current·0 all-time
by极速数据@jisuapi
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill name/description (stock holding checks using Jisu APIs) matches the actual behavior: it calls jisuapi.com endpoints and computes indicators. However, the registry metadata lists JISU_STOCK_MONITOR_STATE as a required env var while SKILL.md and the code treat the state file path as optional; this mismatch is likely a packaging/metadata oversight rather than functional necessity.
Instruction Scope
SKILL.md explicitly instructs running the included monitor.py which only: reads a JSON holdings config, calls Jisu stock & history APIs, computes indicators, and optionally reads/writes a local state file. It does not instruct the agent to fetch unrelated system files or send data to arbitrary external endpoints beyond api.jisuapi.com.
Install Mechanism
There is no install spec; the skill is distributed with a Python script (monitor.py) and the docs recommend installing the standard 'requests' package. No remote downloads or unusual installers are used.
Credentials
Requesting JISU_API_KEY is appropriate (primary credential). The additional JISU_STOCK_MONITOR_STATE env var is used as a convenient default state-file path but is optional in practice; treating it as 'required' in registry metadata is disproportionate and may confuse users. No unrelated secrets or extra external credentials are requested.
Persistence & Privilege
Skill does not request always:true and does not require a resident process. It may create or update a local state file when configured, which is expected for cross-run trailing-peak tracking; it does not modify other skills or global agent settings.
Assessment
This skill appears to do what it claims: run a local Python script that queries Jisu APIs and optionally saves a local state file. Before installing/running: (1) ensure you only provide a JISU_API_KEY you trust for this purpose; (2) keep any JSON that contains holding costs or state_file paths out of public repos (the SKILL.md already recommends .gitignore); (3) note the registry metadata lists JISU_STOCK_MONITOR_STATE as required but the script and docs treat it as optional — you can run the tool without that env var by passing state_file in the request or omitting it; (4) inspect monitor.py yourself (it’s included) and install only the standard 'requests' dependency; (5) if you allow the agent to call skills autonomously, be aware this skill will make network requests to api.jisuapi.com when invoked.Like a lobster shell, security has layers — review code before you run it.
latestvk97142wcfxcp3j121wsa321df5844nm0
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🛎️ Clawdis
Binspython3
EnvJISU_API_KEY, JISU_STOCK_MONITOR_STATE
Primary envJISU_API_KEY
