Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

StockIndexMonitor

v1.0.0

全功能智能股票监控预警系统。支持成本百分比、均线金叉死叉、RSI超买超卖、成交量异动、跳空缺口、动态止盈等7大预警规则。符合中国投资者习惯(红涨绿跌)。

0· 111·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for quant520/stock-index-monitor.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "StockIndexMonitor" (quant520/stock-index-monitor) from ClawHub.
Skill page: https://clawhub.ai/quant520/stock-index-monitor
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install stock-index-monitor

ClawHub CLI

Package manager switcher

npx clawhub@latest install stock-index-monitor
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The SKILL.md claims a full, always-running stock monitor with data, alerts, and news analysis, but the skill bundle contains no code, no install spec, no binaries, and no declared data/API credentials. A legitimate implementation would need market-data sources or broker/API keys and some executable code; those are missing.
!
Instruction Scope
Runtime instructions tell the agent/user to cd into ~/workspace/skills/stock-monitor/scripts and run ./control.sh start/status/log/stop. The package contains no scripts. Directing execution of a local control.sh (which may not exist) is vague and could cause an agent or user to create/execute arbitrary shell scripts — a scope mismatch and potential operational risk.
Install Mechanism
There is no install spec (instruction-only), which normally reduces risk. However, because the instructions expect a local persistent process (control.sh) but the bundle provides no code or source to install, it is unclear how the runtime assets are obtained — this ambiguity increases risk if the agent or user fetches code from an untrusted location.
Credentials
The skill declares no required environment variables or credentials. Real-world monitoring (market data, news APIs, or trading) typically requires API keys or service credentials; their absence is an inconsistency (either omitted or expected to be supplied later interactively). This could lead to ad-hoc credential requests or insecure behavior.
Persistence & Privilege
The instructions expect running a background/daemon process under the user's workspace, which implies file creation and persistent execution. The skill does not request platform-wide privileges or set always:true, but persistent local processes can still have impact; the skill gives no guidance on where code comes from or what user account it should run under.
What to consider before installing
This skill claims a full stock-monitoring daemon but provides no code, install steps, or data sources — and asks you to run a local ./control.sh that isn't included. Before installing or following these instructions: (1) Ask the publisher for the actual source code or an install package and a provenance (GitHub repo, release URL, checksum). (2) Request explicit details of what market-data APIs or news endpoints it uses and what credentials (if any) are required. (3) Never run an unknown control.sh: inspect its contents first; run it in a sandbox or throwaway VM as a non-privileged user. (4) If the skill will fetch code at runtime, require signed releases from a trusted host. (5) If you plan to provide API keys, only give the minimum-scoped keys and verify network endpoints the skill uses. Given the missing pieces, do not run any start scripts or grant credentials until the author supplies source code and a clear install plan.

Like a lobster shell, security has layers — review code before you run it.

latestvk973sb97egakkc8rxg6z4kmj6h83g2p5
111downloads
0stars
1versions
Updated 1mo ago
v1.0.0
MIT-0

Stock Monitor Pro - 全功能智能投顾系统

🎯 核心特色

1. 七大预警规则 (全都要!)

规则触发条件权重
成本百分比盈利+15% / 亏损-12%⭐⭐⭐
日内涨跌幅个股±4% / ETF±2% / 黄金±2.5%⭐⭐
成交量异动放量>2倍均量 / 缩量<0.5倍⭐⭐
均线金叉/死叉MA5上穿/下穿MA10⭐⭐⭐
RSI超买超卖RSI>70超买 / RSI<30超卖⭐⭐
跳空缺口向上/向下跳空>1%⭐⭐
动态止盈盈利10%+后回撤5%/10%⭐⭐⭐

2. 分级预警系统

  • 🚨 紧急级: 多条件共振 (如: 放量+均线金叉+突破成本)
  • ⚠️ 警告级: 2个条件触发 (如: RSI超卖+放量)
  • 📢 提醒级: 单一条件触发

3. 中国习惯

  • 🔴 红色 = 上涨 / 盈利
  • 🟢 绿色 = 下跌 / 亏损

📋 监控配置

完整预警规则示例

{
    "code": "600362",
    "name": "江西铜业",
    "type": "individual",  # 个股
    "market": "sh",
    "cost": 57.00,          # 持仓成本
    "alerts": {
        # 1. 成本百分比
        "cost_pct_above": 15.0,    # 盈利15%提醒 (¥65.55)
        "cost_pct_below": -12.0,   # 亏损12%提醒 (¥50.16)
        
        # 2. 日内涨跌幅 (个股±4%)
        "change_pct_above": 4.0,
        "change_pct_below": -4.0,
        
        # 3. 成交量异动
        "volume_surge": 2.0,       # 放量>2倍5日均量
        
        # 4-7. 技术指标 (默认开启)
        "ma_monitor": True,        # 均线金叉死叉
        "rsi_monitor": True,       # RSI超买超卖
        "gap_monitor": True,       # 跳空缺口
        "trailing_stop": True      # 动态止盈
    }
}

标的类型差异化

类型日内异动阈值成交量阈值适用标的
individual (个股)±4%2倍江西铜业、中国平安
etf (ETF)±2%1.8倍恒生医疗、创50等
gold (黄金)±2.5%伦敦金

🚀 运行方式

后台常驻进程

cd ~/workspace/skills/stock-monitor/scripts
./control.sh start    # 启动
./control.sh status   # 查看状态
./control.sh log      # 查看日志
./control.sh stop     # 停止

⚡ 智能频率 (北京时间)

时间段频率监控标的
交易时间 9:30-15:00每5分钟全部+技术指标
午休 11:30-13:00每10分钟全部
收盘后 15:00-24:00每30分钟全部 (日线数据)
凌晨 0:00-9:30每1小时仅伦敦金
周末每1小时仅伦敦金

🔔 预警消息示例

多条件共振 (紧急级)

🚨【紧急】🔴 江西铜业 (600362)
━━━━━━━━━━━━━━━━━━━━
💰 当前价格: ¥65.50 (+15.0%)
📊 持仓成本: ¥57.00 | 盈亏: 🔴+14.9%

🎯 触发预警 (3项):
  • 🎯 盈利 15% (目标价 ¥65.55)
  • 🌟 均线金叉 (MA5¥63.2上穿MA10¥62.8)
  • 📊 放量 2.5倍 (5日均量)

📊 江西铜业 深度分析
💰 价格异动:
• 当前: 65.5 (+15.0%)
• MA趋势: MA5>MA10>MA20 [多头排列]
• RSI: 68 [接近超买]

💡 Kimi建议:
🚀 多条件共振,趋势强劲,可考虑继续持有或分批减仓。

RSI超卖 (警告级)

⚠️【警告】🟢 恒生医疗 (159892)
━━━━━━━━━━━━━━━━━━━━
💰 当前价格: ¥0.72 (-10.0%)
📊 持仓成本: ¥0.80 | 盈亏: 🟢-10.0%

🎯 触发预警 (2项):
  • 📉 日内大跌 -10.0%
  • ❄️ RSI超卖 (28.5),可能反弹

💡 Kimi建议:
🔍 短期超跌严重,RSI进入超卖区,关注反弹机会但勿急于抄底。

动态止盈提醒

📢【提醒】🔴 中国平安 (601318)
━━━━━━━━━━━━━━━━━━━━
💰 当前价格: ¥70.50 (+6.8%)
📊 持仓成本: ¥66.00 | 盈亏: 🔴+6.8%

🎯 触发预警:
  • 📉 利润回撤 5.2%,建议减仓保护利润
  (最高盈利12%已回撤)

⚙️ 自定义配置

修改成本价

"cost": 55.50,  # 改成你的实际成本

调整预警阈值

"cost_pct_above": 20.0,     # 盈利20%提醒
"cost_pct_below": -15.0,    # 亏损15%提醒
"change_pct_above": 5.0,    # 日内异动±5%
"volume_surge": 3.0,        # 放量3倍提醒

开关技术指标

"ma_monitor": False,     # 关闭均线
"rsi_monitor": True,     # 开启RSI
"gap_monitor": True,     # 开启跳空

📝 更新日志

  • v3.0 全功能版: 完成7大预警规则 (成本/涨跌幅/成交量/均线/RSI/跳空/动态止盈)
  • v2.4 成本百分比版: 支持基于持仓成本的百分比预警
  • v2.3 中国版: 红涨绿跌颜色习惯
  • v2.2 常驻进程版: 后台常驻进程支持
  • v2.1 智能频率版: 智能频率控制
  • v2.0 Pro版: 新闻舆情分析

⚠️ 使用提示

  1. 技术指标有滞后性: 均线、MACD等都是滞后指标,用于确认趋势而非预测
  2. 避免过度交易: 预警只是参考,不要每个信号都操作
  3. 多条件共振更可靠: 单一指标容易假信号,多条件共振更准确
  4. 动态止盈要灵活: 回撤5%减仓、10%清仓是建议,根据市场灵活调整

核心原则:

预警系统目标是"不错过大机会,不犯大错误",不是"抓住每一个波动"。

Comments

Loading comments...