安全扫描
OpenClaw
安全
high confidenceThe skill's code, instructions, and resource access are consistent with a stock-price monitoring tool; no unexplained credential requests, hidden endpoints, or installation of arbitrary code were found.
评估建议
This package appears to do what it says: poll Yahoo Finance (and optionally Futu OpenD) and write small JSON state files under ~/.openclaw/workspace/memory. Before installing or scheduling it: 1) If you plan to use futu_stocks_monitor.py, install and review the futu Python package and be aware that the script expects an optional unlock_password in the config file (don't store sensitive passwords in plaintext unless you accept the risk). 2) The scripts only print alerts; ensure whatever cron/chan...详细分析 ▾
ℹ 用途与能力
The name/description (real-time stock monitoring with Yahoo/Futu support) matches the provided scripts: stocks_monitor.py and stocks_rebalance_monitor.py use Yahoo Finance, futu_stocks_monitor.py uses the Futu OpenD client. Minor mismatch: the package has no declared dependency list but futu_stocks_monitor.py imports the futu library (will fail if futu is not installed). Otherwise the capabilities requested (reading a simple JSON config, calling Yahoo/Futu APIs, saving small state files) are proportional to the stated purpose.
✓ 指令范围
SKILL.md instructs creating a config in ~/.openclaw/workspace/memory and running the included scripts (or scheduling them via the platform cron). The instructions only reference the expected config and state file paths and the platform's cron/channel for delivering outputs. They do not ask the agent to read unrelated files or environment variables. Minor inconsistency: example run paths in SKILL.md reference ~/.openclaw/skills/… which may differ from where the skill's files are placed; this is an operational (not security) mismatch.
ℹ 安装机制
There is no install spec (instruction-only install), which is low risk. The package includes Python scripts that will run locally. Note: futu_stocks_monitor.py requires the third-party futu Python package (import futu) but no dependency or install instruction is provided, which may cause runtime errors if a user runs that script without installing futu.
ℹ 凭证需求
The skill does not request any environment variables or credentials. The only sensitive input surface is the optional futu 'unlock_password' in the config JSON (the script reads it from the config file, not from env), which would be stored in plaintext under ~/.openclaw/workspace/memory if the user puts it there. The scripts make outbound requests only to Yahoo Finance endpoints (query1.finance.yahoo.com) and — for futu — to a local OpenD service (default 127.0.0.1:11111). There are no other credential-like env vars referenced.
✓ 持久化与权限
The skill does not request always:true and does not modify other skills or global agent settings. It stores its own small JSON state files under ~/.openclaw/workspace/memory/, which is expected for a monitoring tool. It prints alerts to stdout; actual delivery to channels (e.g., Discord) is delegated to the platform's cron/channel integration, not the skill itself.
安全有层次,运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.3.02026/3/1
feat: 新增股票调仓条件单监控功能 - 支持多股票联动条件(如:拼多多涨到 100 且微软跌到 130 时提醒) - 支持重复提醒(可配置连续提醒次数和间隔) - 支持 24 小时冷却期 - 新增 HTML 网页格式输出(中英文对照) - 优化 A 股/港股 9:30 开盘前跳过检查
● 可疑
安装命令 点击复制
官方npx clawhub@latest install stock-monitor
镜像加速npx clawhub@latest install stock-monitor --registry https://cn.clawhub-mirror.com
技能文档
实时监控多只股票价格,当波动超过阈值时自动提醒。
快速开始
1. 配置股票列表
创建配置文件 ~/.openclaw/workspace/memory/stocks_config.json:
{
"stocks": {
"贵州茅台": {"symbol": "600519.SS", "base_price": 1600.0, "currency": "¥"},
"腾讯控股": {"symbol": "0700.HK", "base_price": 512.0, "currency": "HK$"},
"拼多多": {"symbol": "PDD", "base_price": 120.0, "currency": "$"}
}
}
配置说明:
symbol: Yahoo Finance 股票代码
600519.SS (茅台)
- 港股: 0700.HK (腾讯)
- 美股: PDD (拼多多), AAPL (苹果)
base_price: 基准价(昨日收盘或参考价)currency: 货币符号
2. 运行监控
python3 ~/.openclaw/skills/stock-monitor/scripts/stocks_monitor.py
3. 设置定时任务
# 每5分钟检查一次
openclaw cron add --name "股票监控" --cron "/5 *" --tz "Asia/Shanghai" --message "运行 python3 ~/.openclaw/workspace/skills/stock-monitor/scripts/stocks_monitor.py 并把输出发给我" --channel discord
预警规则
- 首次预警: 涨跌超过 2%
- 续警: 同一天内,再波动超过 1%
- 重置: 新一天自动重置基准价为前一天收盘价
常用股票代码
| 股票 | 港股代码 | 美股代码 |
|---|---|---|
| 腾讯控股 | 0700.HK | TCEHY |
| 阿里巴巴 | 9988.HK | BABA |
| 美团 | 3690.HK | MPNG |
| 小米 | 1810.HK | XI |
| 茅台 | - | 600519.SS |
状态文件
脚本会自动在 ~/.openclaw/workspace/memory/stocks_alert.json 保存监控状态,包括是否已预警、预警日期等。
数据来源:ClawHub ↗ · 中文优化:龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险,如需更匹配、更安全的方案,建议联系付费定制