港股美股监控

PassAudited by ClawScan on May 1, 2026.

Overview

This stock-monitoring skill behaves consistently with its stated purpose, with only user-controlled setup, scheduled-run, and local state-file considerations to notice.

This skill appears safe for its stated purpose. Before installing, prefer a Python virtual environment instead of --break-system-packages, only enable the cron example if you want continuous monitoring, and be aware that customized ticker lists may be saved in the local state file.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing this way could modify the user's Python environment more broadly than necessary.

Why it was flagged

The skill asks the user to install third-party Python packages without version pins and with a flag that can bypass system Python package protections.

Skill content
pip3 install yfinance numpy --break-system-packages
Recommendation

Install the dependencies in a virtual environment and consider pinning package versions before regular use.

What this means

If enabled, the monitor will continue running on a schedule and writing logs until the user removes the cron job.

Why it was flagged

The documentation includes a cron example that would keep running the monitor every five minutes if the user installs it.

Skill content
*/5 * * * * cd /path/to && python3 scripts/monitor.py >> monitor.log 2>&1
Recommendation

Only add the cron entry if recurring monitoring is desired, and document how to disable it.

What this means

The saved file may reveal the monitored ticker list, especially if the user customizes it, but it does not contain credentials or private account data.

Why it was flagged

The script persists monitor state into the OpenClaw workspace memory area; the stored data appears limited to update time, ticker prices, percent changes, and RSI values.

Skill content
with open('/Users/apple/.openclaw/workspace/memory/stocks_monitor.json', 'w') as f:
        json.dump(state, f, indent=2)
Recommendation

Keep the state file if persistent monitoring history is useful; otherwise change or remove the write path.