Stock Monitor Skill

自动监控股票价格，突破阈值时自动发送飞书语音提醒。支持多只股票、自定义阈值、交易时间判断。

Security Scan

The skill mostly matches its stated purpose (monitoring stocks and sending Feishu voice alerts) but there are several inconsistencies and mild surprises (missing/renamed helper scripts, an extra NOIZ_API_KEY credential whose use isn't obvious in the visible code, and a dependency on a sibling feishu-edge-tts script) that warrant review before install.

Purpose & Capability

Name/description (stock monitoring + Feishu voice alerts) align with what the code does: polling public stock APIs and sending voice/text alerts. Required env vars in manifests (FEISHU_* and NOIZ_API_KEY) are plausible for sending TTS via Feishu or a TTS provider.

Instruction Scope

Runtime instructions and scripts focus on reading a stocks.conf and (optionally) holidays.conf, caching to /tmp, calling public stock APIs, and invoking a local send_voice.sh if available. They do not (in the shown code) read unrelated system files or network endpoints beyond stock data and standard services. However SKILL.md and README reference helper files (get_price.sh, notify.sh, config.sh) that are not present in the package (the repo contains fetch_price.sh and monitor.sh), which is an inconsistency that could lead to unexpected behavior or missing functionality.

Install Mechanism

This is instruction-only with no install spec — nothing is downloaded or written by an installer. The scripts use standard tools (curl, bc, jq). This lowers supply-chain risk.

Credentials

The skill requires FEISHU_APP_ID/SECRET/CHAT_ID (expected) and NOIZ_API_KEY. FEISHU credentials are sensitive but expected for a messaging/voice skill. NOIZ_API_KEY is a third credential (presumably for a TTS/Noiz AI service); in the visible script the NOIZ_API_KEY is only checked for presence, and its actual usage isn't shown in the truncated code — this raises the question of whether the key will be used only for TTS or for broader calls. Confirm what NOIZ_API_KEY is used for before providing it.

Persistence & Privilege

The skill does not request permanent/global inclusion (always:false) and does not modify other skills' configurations. It writes cache files to /tmp and reads project-local config files; that is expected for a monitoring script.

What to consider before installing

Things to check before installing/using: - Verify which files actually exist in the package: SKILL.md/README mention get_price.sh, notify.sh, and config.sh but the bundle contains fetch_price.sh and monitor.sh; confirm the entry_point (scripts/monitor.sh) is the intended runner and that no missing helper scripts are required. - Inspect any send_voice.sh script you will use (the skill will call ../feishu-edge-tts/scripts/send_voice.sh if that sibling directory exists). If you rely on that, review that script to see how FEISHU_* and NOIZ_API_KEY are used. - Confirm why NOIZ_API_KEY is required and what scope/permissions that key has; avoid reusing high-privilege keys. If you don't have or trust NoizAI, test operation in a safe environment where TTS fallback (echo) is acceptable. - Run the scripts in a sandbox or isolated account first (crontab scheduling can cause repeated network activity). Check logs to ensure credentials are used only for sending alerts and not for uploading data elsewhere. - Because the package is instruction-only and uses network calls, prefer running it on a host where you can monitor outbound traffic and rotate any credentials after testing.

Stock Monitor Skill - 股票自动监控技能

自动监控股票价格，突破阈值时自动发送语音提醒！

🎯 功能特点

• ✅ 实时监控：支持 A 股/港股/美股
• ✅ 语音提醒：突破阈值自动发飞书语音条
• ✅ 多股票支持：同时监控多只股票
• ✅ 自定义阈值：每只股票独立设置涨跌阈值
• ✅ 交易时间判断：自动跳过非交易时间
• ✅ 智能防打扰：午休时间不提醒

📋 使用场景

• 📈 短线交易：监控关键价位突破
• 💼 上班族：没空看盘，自动提醒
• 🎯 止盈止损：到达目标价自动通知
• 🔔 异动提醒：大涨大跌不错过

🔧 前置要求

1. Feishu 应用配置

同 Feishu Voice Skill

2. 股票数据源

使用新浪财经免费 API（无需 key）

3. 系统依赖

# 安装 jq（JSON 处理）
yum install -y jq  # CentOS/OpenCloudOS
apt-get install -y jq  # Ubuntu/Debian

🚀 快速开始

步骤 1：配置环境变量

export FEISHU_APP_ID="cli_xxx"
export FEISHU_APP_SECRET="xxx"
export FEISHU_CHAT_ID="oc_xxx"
export NOIZ_API_KEY="xxx"

步骤 2：添加监控股票

编辑 stocks.conf：

# 格式：股票代码，股票名称，涨阈值%，跌阈值%
sh600519,贵州茅台，3,3
sz000858,五粮液，4,4
sh601318,中国平安，5,5

步骤 3：运行监控

# 手动运行一次
bash scripts/monitor.sh

# 加入定时任务（每 5 分钟检查一次）
crontab -e
*/5 9-11,13-15 * * 1-5 bash /path/to/monitor.sh  # 交易日交易时间

📖 命令参数

bash scripts/monitor.sh [选项]

选项:
  -c, --config <file>     配置文件路径（默认：stocks.conf）
  -o, --once              只运行一次，不监控
  -v, --verbose           详细输出
  -h, --help              显示帮助

💡 使用示例

1. 监控贵州茅台

# 添加股票
echo "sh600519，贵州茅台，3,3" >> stocks.conf

# 运行监控
bash scripts/monitor.sh

2. 设置止盈止损

# 涨 5% 止盈提醒，跌 3% 止损提醒
echo "sz000858，五粮液，5,3" >> stocks.conf

3. 多股票监控

# 批量添加
cat >> stocks.conf << EOF
sh600519，贵州茅台，3,3
sz000858，五粮液，4,4
sh601318，中国平安，5,5
sz002415，海康威视，4,4
EOF

bash scripts/monitor.sh

📊 提醒内容

当股票突破阈值时，司幼会发送语音：

"主人～ 贵州茅台现价 1850 元，涨了 3.2%，突破您设置的 3% 阈值啦！要不要看看？"

⚙️ 高级配置

1. 自定义监控时间

编辑 config.sh：

# 监控时间段（24 小时制）
START_HOUR=9
END_HOUR=15

# 午休时间不监控
LUNCH_START=11:30
LUNCH_END=13:00

# 周末不监控
WEEKEND_SKIP=true

2. 自定义提醒方式

# 语音 + 文字
NOTIFY_TYPE="both"

# 只发文字
NOTIFY_TYPE="text"

# 只发语音
NOTIFY_TYPE="voice"

3. 价格缓存

避免频繁请求 API：

# 缓存时间（秒）
CACHE_TTL=60

🐛 故障排除

问题 1：获取不到股价

解决：检查网络连接，新浪财经 API 可能需要代理

问题 2：重复提醒

解决：检查缓存配置，避免同一阈值反复触发

问题 3：非交易时间也提醒

解决：检查交易时间判断逻辑

📦 文件结构

stock-monitor-skill/
├── SKILL.md
├── README.md
├── reference.md
├── scripts/
│   ├── monitor.sh        # 主监控脚本
│   ├── get_price.sh      # 获取股价
│   ├── notify.sh         # 发送提醒
│   └── config.sh         # 配置文件
├── examples/
│   ├── stocks.conf       # 股票配置示例
│   └── crontab.txt       # 定时任务示例
└── stocks.conf           # 用户配置

💰 商业授权

• 个人使用：免费
• 商业使用：请联系作者获取授权

---

Made with ❤️ by 司幼 (SiYou)