Portfolio
v3.4.2Manage investment portfolios. Use when adding positions, analyzing allocation, calculating returns, or generating rebalance advice.
⭐ 0· 306·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (portfolio manager) aligns with the included script and SKILL.md: commands for add/remove/list/analyze/rebalance/performance are implemented. Minor mismatch: SKILL.md documents an analyze --by ticker|sector flag, but the script's analyze implementation always aggregates by ticker (sector grouping is not implemented). Otherwise the capabilities requested are proportional to the stated purpose.
Instruction Scope
Runtime instructions and the script operate only on local files in ~/.portfolio (holdings.json and transactions.json) and print to stdout. The SKILL.md claims no external API calls and the script does not perform network I/O or attempt to read unrelated system files or credentials.
Install Mechanism
No install spec is provided (instruction-only packaging) and the shipped script is executed locally. There are no downloads or third-party package installs; risk from install mechanism is low.
Credentials
The skill declares no required environment variables or credentials. At runtime it uses HOME for the default data directory and passes its own variables into embedded Python blocks — there are no requests for secrets or unrelated credentials.
Persistence & Privilege
always:false and model invocation is normal. The skill persists only its own data to ~/.portfolio and does not modify other skills, system configs, or request elevated privileges.
Assessment
This skill appears to do exactly what it says: a local portfolio manager that writes/reads ~/.portfolio/holdings.json and transactions.json and uses python3 (standard library). Before installing or running: (1) inspect the script (already included) and confirm you are comfortable with data being stored unencrypted in ~/.portfolio; (2) back up or move any existing ~/.portfolio files to avoid accidental overwrite; (3) note the small feature mismatch (analyze --by sector is documented but not implemented); and (4) if you plan to store sensitive financial records, consider filesystem permissions or encryption for the data directory. If you want absolute isolation, run the script in a container or limited user account.Like a lobster shell, security has layers — review code before you run it.
latestvk9774v4t5wm525g5dynp925aq18343bg
License
MIT-0
Free to use, modify, and redistribute. No attribution required.