a-share-quant-report

PassAudited by VirusTotal on May 7, 2026.

Overview

Type: OpenClaw Skill Name: a-share-quant-report Version: 1.0.2 The skill bundle is a comprehensive tool designed for reproducing A-share quantitative financial research reports. The core logic in `python_report_style_factor_backtest.py` utilizes standard financial libraries (yfinance, akshare, pandas, and matplotlib) to fetch market data, calculate factors, and generate performance visualizations. The instructions in `SKILL.md` and supporting documentation (e.g., `dataset-selection-rules.md`, `output-template.md`) provide structured guidance for the AI agent to act as a financial analyst without any indicators of malicious intent, data exfiltration, or unauthorized system access.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

运行脚本时可能向外部行情服务请求股票代码和时间区间数据,并消耗网络、时间和本地计算资源。

Why it was flagged

脚本默认以1000只股票为目标并调用外部行情下载接口;这符合回测目的,但用户应知道它会产生外部网络请求和较大规模数据处理。

Skill content
TARGET_DOWNLOAD_STOCKS = int(os.getenv('TARGET_DOWNLOAD_STOCKS', '1000'))
...
raw = yf.download(chunk, start=START, end=END, auto_adjust=True, progress=False, group_by='ticker', threads=False)
Recommendation

在允许访问外部行情源的环境中运行,并按需设置 TARGET_DOWNLOAD_STOCKS、START、END、CHUNK_SIZE 和 OUT_DIR 来限制规模。

What this means

用户需要自行准备这些包;如果从不可信来源安装或版本差异较大,可能影响复现结果或环境安全。

Why it was flagged

随附脚本依赖第三方Python包和行情库;注册信息又显示无安装规格,因此依赖版本、安装来源和运行环境未被明确固定。

Skill content
import yfinance as yf
import akshare as ak
Recommendation

使用可信包源,尽量固定 yfinance、akshare、pandas、numpy、matplotlib 等依赖版本,并在隔离Python环境中运行。

What this means

安装前较难独立核对该技能的原始仓库、变更历史和代码来源。

Why it was flagged

这是一个带有Python代码文件的技能,但元数据未给出明确上游源码位置,主页也指向通用格式文档,降低了来源可验证性。

Skill content
Source: unknown
Homepage: https://github.com/openclaw/clawhub/blob/main/docs/skill-format.md
Recommendation

安装/运行前查看完整文件内容和发布者信息;如用于重要研究流程,优先要求明确源码仓库或校验过的发布包。