Stock Monitor

PassAudited by ClawScan on May 1, 2026.

Overview

This appears to be a purpose-aligned stock alert monitor, but users should know it runs a background process and queries third-party market/news services.

Review and edit the watchlist and cost values before use, install any needed Python dependencies, and only start the daemon if you want continuous background polling. Be aware that monitored symbols may be sent to Sina/EastMoney-style providers, and treat any generated trading suggestions as informational rather than authoritative financial advice.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The monitor can keep polling market data in the background after it is started.

Why it was flagged

The control script starts a background daemon and records logs/PID under $HOME/.stock_monitor. This is disclosed and purpose-aligned, but it will continue running until stopped.

Skill content
nohup python3 "$SCRIPT_DIR/monitor_daemon.py" > "$LOG_DIR/monitor.log" 2>&1 &
Recommendation

Start it only when you want continuous monitoring, and use ./control.sh status, log, and stop to manage it.

What this means

Third-party providers may observe which securities are being monitored.

Why it was flagged

The analyser sends stock names/symbol-related queries to third-party financial/news providers. This is expected for the feature, but it creates an external data boundary for the user's watchlist.

Skill content
url = f"https://searchapi.eastmoney.com/api/suggest/get" ... params = {"input": name, "type": 14, "count": limit}
Recommendation

Only put holdings/watchlist entries in the configuration if you are comfortable querying those external services.

What this means

Installation or first run may fail or require manual dependency setup.

Why it was flagged

The provided artifacts include shell/Python scripts that invoke python3 and import requests, so setup requirements are under-declared even though the behavior is visible and purpose-aligned.

Skill content
Required binaries (all must exist): none ... No install spec — this is an instruction-only skill.
Recommendation

Before installing, verify Python 3 and required Python packages are available; the publisher should declare dependencies and include the referenced example config.

What this means

Users might over-rely on generated alerts or suggestions when making financial decisions.

Why it was flagged

The skill frames itself as an investment-advice system and provides suggested trading actions. It also includes cautionary usage tips, so this is a trust/decision-making note rather than evidence of malicious behavior.

Skill content
# Stock Monitor Pro - 全功能智能投顾系统 ... 💡 Kimi建议: 🚀 多条件共振,趋势强劲,可考虑继续持有或分批减仓。
Recommendation

Treat alerts as monitoring signals only and independently evaluate any buy/sell/hold decision.