Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

港股美股监控

v1.1.0

港股/美股/加密货币实时监控。使用 Yahoo Finance (yfinance) 获取实时价格、技术指标监控。支持自定义股票池、涨跌提醒、均线/RSI/MACD信号。

0· 834·9 current·9 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for sanduan003/stock-monitor-hkus.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "港股美股监控" (sanduan003/stock-monitor-hkus) from ClawHub.
Skill page: https://clawhub.ai/sanduan003/stock-monitor-hkus
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install stock-monitor-hkus

ClawHub CLI

Package manager switcher

npx clawhub@latest install stock-monitor-hkus
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
medium confidence
Purpose & Capability
Name/description (real-time monitoring using yfinance, indicators, alerts) match the included script: it fetches data via yfinance, computes MA/RSI/MACD and prints results. Requiring yfinance and numpy is appropriate.
Instruction Scope
SKILL.md instructs to install yfinance/numpy and run scripts/monitor.py, which is accurate. The script only fetches market data and writes a small JSON state file, so runtime behavior stays within the declared purpose. However the SKILL.md references a relative state path 'memory/stocks_monitor.json' while the script writes to a hard-coded absolute path '/Users/apple/.openclaw/workspace/memory/stocks_monitor.json' — an inconsistency that may cause file-write failures or unintended writes to a user-specific location.
Install Mechanism
This is an instruction-only skill with no install spec. SKILL.md asks users to run 'pip3 install yfinance numpy --break-system-packages'. Installing these packages is expected, but the '--break-system-packages' flag is unusual and can alter system Python package protections; recommend using a virtual environment instead.
Credentials
The skill requests no environment variables or credentials. The only external dependency is network access to Yahoo Finance via yfinance, which is appropriate for the stated functionality.
Persistence & Privilege
always:false and the skill does not modify other skills or system settings. It does persist a small JSON state file to a hard-coded user path (/Users/apple/...), which is a low-privilege action but user-specific and brittle; consider making the path configurable or relative to the agent workspace.
Assessment
This skill appears to do exactly what it claims: fetch market data via yfinance, compute indicators, print results, and save a small state file. Before installing or running it: 1) Inspect and (preferably) change the hard-coded state path '/Users/apple/.openclaw/workspace/memory/stocks_monitor.json' to a path appropriate for your environment or make it configurable; otherwise it may fail or write into an unexpected home directory. 2) Install packages inside a virtualenv (avoid '--break-system-packages') to prevent altering system Python packages. 3) Confirm you are comfortable with the script contacting Yahoo Finance (yfinance) over the network. 4) If you plan automated runs (cron), ensure the working directory and Python environment are set correctly. 5) If you need alerts or external posting, add explicit code that sends data to your chosen endpoint and review that code carefully before supplying credentials.

Like a lobster shell, security has layers — review code before you run it.

latestvk97e1h8n1t8ajmhbeyjv3288ns82ft92
834downloads
0stars
2versions
Updated 2h ago
v1.1.0
MIT-0

港股/美股/加密货币监控

实时监控价格,支持技术指标分析和信号提醒。

快速开始

安装依赖

pip3 install yfinance numpy --break-system-packages

运行监控

python3 scripts/monitor.py

自定义股票池

编辑 scripts/monitor.py 中的 STOCKS 字典

功能

实时数据

  • 实时价格、涨跌幅
  • 5日涨跌幅度
  • 成交量统计

技术指标

  • 均线: MA5 / MA10 / MA20
  • RSI: 相对强弱指标
  • MACD: 趋势判断

信号判断

信号条件
多头MA5 > MA10
空头MA5 < MA10
超买RSI > 70
超卖RSI < 30
金叉MACD DIF上穿DEA
死叉MACD DIF下穿DEA

默认股票池

港股 (5只)

0700.HK 腾讯 | 9988.HK 阿里 | 3690.HK 美团 | 1810.HK 小米 | 0005.HK 汇丰

美股 (5只)

AAPL 苹果 | MSFT 微软 | GOOGL 谷歌 | TSLA 特斯拉 | NVDA 英伟达

加密货币 (2只)

BTC-USD 比特币 | ETH-USD 以太坊

定时任务

# 每5分钟监控
*/5 * * * * cd /path/to && python3 scripts/monitor.py >> monitor.log 2>&1

输出示例

📊 港股/美股监控 - 2026-03-07 20:45
============================================================
📈 苹果(AAPL): $257 +0.05% | RSI:45 多头
📉 腾讯(0700.HK): HK$519 +0.00% | RSI:38 空头
📈 BTC: $68,000 +1.2% | RSI:52 多头

状态文件

memory/stocks_monitor.json

Comments

Loading comments...