Stock Monitor
ReviewAudited by ClawScan on May 10, 2026.
Overview
The main stock-alert function looks purpose-aligned, but the package also includes an undocumented Futu/OpenD script that can use an unlock password despite the skill declaring no credentials.
Use the Yahoo Finance monitor only if you are comfortable storing your stock watchlist and alert state locally and, if enabling cron, posting alerts to Discord. Review or remove the undocumented Futu script unless you specifically intend to use Futu/OpenD, and do not place brokerage or unlock passwords in config files without understanding where they will be sent.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If this optional script is run, a brokerage or market-data unlock password may be stored in a local JSON config and sent to the configured Futu service host.
This bundled script can read a Futu/OpenD unlock password from configuration and use it, while the skill description emphasizes Yahoo Finance and the requirements declare no primary credential.
unlock_password = futu_config.get("unlock_password", "")
if unlock_password:
ret = quote_ctx.unlock_market(password=unlock_password, unlock=True)Declare the Futu integration and credential requirement clearly, document the exact config path and host behavior, avoid storing passwords in plain JSON, and require explicit user approval before using any Futu password.
Stock alerts may continue running and posting to Discord until the cron job is removed.
The skill instructs the user to create a recurring background task that runs every five minutes and sends the script output to Discord.
openclaw cron add --name "股票监控" --cron "*/5 * * * *" ... --message "运行 python3 ... 并把输出发给我" --channel discord
Only add the cron job if you want ongoing monitoring, use a private channel, and remove or pause the scheduled task when it is no longer needed.
Your watched stocks and alert history may reveal financial interests or holdings if the workspace memory is shared, backed up, or later reused.
The skill stores stock symbols, base prices, and alert state in OpenClaw's workspace memory area.
创建配置文件 `~/.openclaw/workspace/memory/stocks_config.json` ... 脚本会自动在 `~/.openclaw/workspace/memory/stocks_alert.json` 保存监控状态
Keep the workspace private, avoid storing unnecessary sensitive portfolio details, and delete the config/state files when you no longer need monitoring.
The optional Futu script may fail or prompt users to install an undeclared package whose version and provenance are not pinned by this skill.
A bundled script imports the external futu package, but the registry requirements and install specification do not declare any dependency or installation guidance for it.
from futu import *
Document optional dependencies, pin package versions where possible, and remove unused helper scripts if they are not part of the advertised skill.