India Stock Market Pulse
v1.0.0Daily Indian stock market briefing and price alerts. Monitors NSE/BSE stocks, tracks a personal watchlist, and delivers a morning summary via WhatsApp or Tel...
⭐ 0· 336·0 current·0 all-time
by@utsavs
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The declared purpose (daily Indian market briefings, watchlist, alerts) aligns with the single required env var (INDIA_MARKET_WATCHLIST). However the description promises delivery via WhatsApp/Telegram but the skill does not declare or request any messaging credentials or integration details — it's unclear how outbound notifications are actually delivered. Also the SKILL.md lists openclaw.json configuration, which is expected, but primaryEnv is set to a watchlist string (not a credential), which is an odd use of the primary credential slot.
Instruction Scope
Instructions restrict themselves mostly to public market APIs and Moneycontrol RSS, which matches purpose. Concerns: (1) the guidance to 'use browser headers to avoid blocking' implies scraping behavior against NSE's site and may violate terms or be rate-limited; (2) cron timing is internally inconsistent — the doc says 9:15 AM IST = 03:45 UTC but the example cron line uses '15 3' (03:15 UTC), so scheduled runs will be at the wrong time; (3) alerts are described as stored 'in memory' (ephemeral) yet the skill expects cron/long-running behavior, so alerts will be lost across restarts unless persisted elsewhere; (4) the skill refers to an 'active messaging channel' but provides no mechanism for selecting/configuring that channel.
Install Mechanism
Instruction-only skill with no install spec and no code files — lowest-risk install surface. Nothing is written to disk by an installer. That said, runtime scraping and cron setup are required but are user-managed.
Credentials
Only INDIA_MARKET_WATCHLIST is required, which is proportionate for a watchlist-based briefing. Two issues: (1) making the watchlist the 'primary credential' is semantically odd (primaryEnv normally denotes an auth secret); (2) the skill claims to send messages via WhatsApp/Telegram but does not request any messaging tokens or webhook URLs, so it either assumes platform-provided channels (not documented) or would need additional secrets that are not declared.
Persistence & Privilege
Does not request persistent or privileged presence (always:false). It asks the user to add cron jobs and to edit ~/.openclaw/openclaw.json to enable/configure the skill, which is expected for a scheduled notification skill. The in-memory alert storage is low-privilege but also non-persistent.
What to consider before installing
Before installing: (1) confirm how outbound notifications will be delivered — the SKILL.md promises WhatsApp/Telegram but does not request or document any messaging credentials or webhook URLs; do not assume the skill can send messages without you providing/configuring a channel. (2) Fix the cron entries — the documented UTC conversion is wrong (9:15 IST = 03:45 UTC) but the example cron uses minute 15; adjust cron so notifications occur at intended IST times. (3) Be aware the skill suggests scraping NSE using browser headers — this is fragile, may be rate-limited or violate site terms; verify fallback behavior and limits. (4) Alerts are stored only 'in memory' and will be lost on restarts; if you need persistence, ask the maintainer to add durable storage or integrate with your notification system. (5) The primaryEnv field is used for a watchlist string (not a secret) — that's unusual but not dangerous. If you proceed, require the author to document messaging integration and correct the cron examples; otherwise treat the skill as unreliable and avoid granting it access to any messaging credentials until clarified.Like a lobster shell, security has layers — review code before you run it.
indiavk978bpszwtj3m51a42fejsnzr981z1kyindia stock marketvk978bpszwtj3m51a42fejsnzr981z1kylatestvk978bpszwtj3m51a42fejsnzr981z1kystock marketvk978bpszwtj3m51a42fejsnzr981z1ky
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📈 Clawdis
EnvINDIA_MARKET_WATCHLIST
Primary envINDIA_MARKET_WATCHLIST