📦 Market Pulse Wingman — 技能工具
v1.0.0Market risk co-pilot for equities. Use when you need to scan a watchlist for technical context, fresh headlines, and operational/security red flags, then log...
0· 23·0 当前·0 累计
by 安全扫描
OpenClaw
可疑
medium confidenceThe skill's instructions match its stated purpose and request no credentials or installs, but the SKILL.md contains hidden unicode control characters (a prompt-injection signal) and the workflow is open-ended about fetching headlines — warranting caution before installing.
评估建议
What to consider before installing:
- The skill itself is coherent for market-headline scanning and logging and asks for no credentials or installs. That part looks benign.
- However, the SKILL.md contains hidden unicode control characters (a prompt-injection indicator). These characters can conceal or alter instructions the model will follow. Before installing, inspect the raw SKILL.md for non-printable/control characters (e.g., open in a hex editor, run `cat -v SKILL.md`, or use a tool that...详细分析 ▾
✓ 用途与能力
Name, description, and the SKILL.md workflow are coherent: a market-risk co‑pilot that summarizes technical context, headlines, and writes a log. No unrelated env vars, binaries, or installs are requested.
⚠ 指令范围
The instructions are largely scoped to the stated task, but they are open-ended about obtaining 'recent news' and 'publicly available info' (leaving the agent discretion to fetch web content). More importantly, pre-scan detected unicode control characters in SKILL.md — this is a common prompt-injection technique used to hide or alter instructions and could change runtime behavior. Inspect the raw file before trusting autonomous runs.
✓ 安装机制
Instruction-only skill with no install spec or code files — lowest install risk; nothing will be written to disk by an installer.
✓ 凭证需求
No environment variables, credentials, or configuration paths are requested. Requested capabilities are proportional to a news-and-price summarization skill.
✓ 持久化与权限
always:false and no special privileges or config modifications requested. Autonomous invocation is permitted (platform default) but not combined with broad access.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/16
Initial release
● Pending
安装命令
点击复制官方npx clawhub@latest install market-pulse-wingman
镜像加速npx clawhub@latest install market-pulse-wingman --registry https://cn.longxiaskill.com
技能文档
Overview
Use this skill when the user wants a fast but disciplined read on one or more tickers. It blends the day-trading workflow (trend, catalysts, sizing) with a security-auditor pass over current headlines and finally writes a short log entry for the self-improvement tracker.Quick start
- Collect context from the user:
- For each ticker, run the structured workflow below and append the result.
- End with a log template (filled out or ready for the user to confirm).
Workflow per ticker
- Baseline snapshot
- Risk + headline sweep
- Bot recommendation
- Decision log
- Ticker: XYZ
- Date: 2026-04-16
- Bot take: ⚠️ Hold until post-earnings volatility settles.
- Planned action: _____
- Follow-up reminder: Recheck headlines + price 2026-04-18.
Output format
## Market Pulse — 16 Apr 2026Ticker: XYZ
- Price: $123.45 (+1.8% / vol 1.3× avg) | Earnings: Apr 19 | ATR: 3.2
- Setup: Uptrend holding 21EMA; buyers defending $120 gap.
- Risk flags: 🚨 Data breach rumor (TechCrunch, 4h ago) + class-action chatter.
- Bot take: Trim to core until breach story is confirmed; re-add only above $126 on volume.
- Log: (prefill template for user)
Data & tooling notes
- If no live API is available, rely on whatever data the user gives plus broadly known info (earnings calendar, macro events). Be explicit about assumptions.
- Headlines can be summarized manually from user paste or recent articles; cite source + time.
- Keep the total response compact—2–4 bullet lines per ticker plus the log template.
References
references/can store future templates (e.g., logging schema, API hints). Currently unused; delete if not needed later.