Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Xanadu Stock Screener

Screen stocks by fundamental metrics, technical indicators, sector, and market to find and save stocks matching specific financial criteria and trends.

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 130 · 0 current installs · 0 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
scripts/screener.py implements the claimed screening features (uses yfinance, local ticker list, saves watchlists). However, the repository also contains billing code that references SkillPay and a Social Media Manager SKILL_ID in one place — an inconsistency with the skill name and description that looks like copy‑paste or sloppy packaging.
!
Instruction Scope
SKILL.md instructs running scripts/screener.py and documents monetization via SkillPay but the runtime instructions do not show any billing flow. Billing files exist but are not invoked by screener.py; presence of billing code (and a real-looking API key) outside the explained runtime path is unexpected and increases risk because it could be used later or by other code paths.
Install Mechanism
No install spec or external downloads; this is an instruction + bundled-code skill. That lowers installer risk because nothing is fetched from arbitrary URLs during install.
!
Credentials
The package includes a hard-coded SKILLPAY_API_KEY and OWNER_WALLET in scripts/billing_config.py. Although the skill doesn't declare required env vars, embedding a plaintext API key in the code is a secret-leak and trust issue: it can be used to call the billing API or identify the owner. The billing module also has inconsistent defaults (SKILL_ID set to a different product), which is unexplained.
Persistence & Privilege
The skill runs as a normal CLI script, writes watchlists under the user's home (~/.openclaw/stock-screener), and does not request global privileges or use always:true. It does not modify other skills or system-wide configs.
What to consider before installing
This skill's screener code is consistent with its description, but proceed cautiously because the bundle contains billing code with a hard-coded SkillPay API key and inconsistent identifiers (mentions a Social Media Manager). That API key in scripts/billing_config.py is sensitive — it could be abused if the billing API accepts calls with it. Before installing or running: (1) Ask the author to confirm whether the SKILLPAY_API_KEY is a placeholder and why the billing module mentions a different product; (2) delete or rotate billing_config.py (or remove the hard-coded key) if you don't trust the owner; (3) run the skill in a sandbox or VM if you want to test; (4) verify the billing code is not invoked automatically in your deployment; (5) if you plan to use monetization, prefer configuring a SkillPay API key via environment variables rather than using the embedded key. If the author confirms the key is a placeholder and the billing module is unused, the package is much less risky.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.0
Download zip
financevk972z2ryva5n9mq6h3g6nf8w8582d4xxinvestingvk972z2ryva5n9mq6h3g6nf8w8582d4xxlatestvk972z2ryva5n9mq6h3g6nf8w8582d4xxscreeningvk972z2ryva5n9mq6h3g6nf8w8582d4xxstocksvk972z2ryva5n9mq6h3g6nf8w8582d4xx

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

Stock Screener

Find stocks matching specific financial criteria and metrics.

Quick Start

# Find stocks with low P/E
python scripts/screener.py search --pe-max 20 --market-cap-min 1B

# Find high dividend stocks
python scripts/screener.py search --dividend-yield-min 3 --sector technology

# Find momentum stocks
python scripts/screener.py search --momentum 30 --volume-min 10M

Screening Criteria

Fundamental Metrics

  • P/E ratio (forward and trailing)
  • Market cap
  • Dividend yield
  • Revenue growth
  • Profit margins
  • Debt/equity
  • EPS (earnings per share)
  • ROE (return on equity)

Technical Indicators

  • 50/200 day moving averages
  • RSI (relative strength index)
  • Momentum (1M, 3M, 6M)
  • Volume trends

Company Info

  • Sector
  • Industry
  • Market (US, EU, Asia)
  • Exchange (NYSE, NASDAQ, etc.)

Usage

Basic Search

Search for stocks matching criteria:

python scripts/screener.py search --pe-max 25 --dividend-yield-min 2

Sector Filter

Find stocks in specific sectors:

python scripts/screener.py search --sector technology --revenue-growth-min 20

Save Watchlist

Save results to a watchlist:

python scripts/screener.py search --pe-max 15 --save my-watchlist

View Watchlists

python scripts/screener.py list-watchlists
python scripts/screener.py show-watchlist my-watchlist

Data Sources

  • Yahoo Finance (free tier)
  • Alpha Vantage (API key needed)
  • Financial Modeling Prep (API key needed)

Output

Results include:

  • Symbol, Company name
  • Current price
  • Market cap
  • P/E ratio
  • Dividend yield
  • 52-week range
  • Analyst rating

Requirements

  • Python 3.10+
  • yfinance package (Yahoo Finance data)
  • Optional: API keys for premium data

Monetization (SkillPay)

This skill supports SkillPay integration for premium features.

Setup

  1. Sign up at https://skillpay.me
  2. Configure billing in your deployment

Pricing Tiers

TierPriceFeatures
BasicFreeBasic screening, Yahoo Finance data
Pro$9/moPremium filters, real-time alerts, watchlists
Premium$19/moAPI access, unlimited screening, exports

Owner: Xanadu Studios

Files

4 total
Select a file
Select a file to preview.

Comments

Loading comments…