Stock Price Alert

This skill appears to implement the advertised stock-monitoring + Gmail + Sonos alerts, but there are a few red flags you should check before installing: - Verify why the registry requires the 'clawhub' binary; the Python script does not reference it. Ask the publisher to justify or remove that requirement. - The script expects a Gmail OAuth token (token.json) and will look in several relative and workspace-wide paths (including ../../../config/token.json and ~/.openclaw/workspace/config/token.json). Ensure you do not have sensitive tokens in those locations you don't want this skill to access, or run the skill in an isolated environment. - Provide Gmail credentials only as described (create a dedicated token.json for this skill) and never expose tokens you use for other services. - Inspect the full script locally (especially the parts that search for token.json and call subprocess for Sonos) before running, and run first in a restricted or VM environment if you are unsure. - Confirm you are comfortable with the pip packages listed (yfinance, pandas, google auth libs) and install them yourself to avoid unexpected network installs. If the publisher can (a) remove the unexplained 'clawhub' requirement, (b) document the exact credential files/paths needed, or (c) limit token discovery to a single explicit path you control, the transparency and safety of this skill would improve.