主力建仓扫描
PassAudited by ClawScan on May 10, 2026.
Overview
This is a purpose-aligned stock-scanning skill that fetches public market data and writes a local report, with minor notes about external API use, persistence, and execution metadata.
This skill appears safe for its stated purpose if you only need a local stock-scan report. Be aware that it contacts Eastmoney, saves output persistently under a hardcoded OpenClaw memory path, and may need to be run with Python rather than bash.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Running the skill will make network requests to Eastmoney to fetch public stock data.
The scanner contacts an external market-data provider to retrieve stock lists and k-line data. This is expected for the stated stock-scanning purpose and does not send local files or credentials.
url = 'https://push2.eastmoney.com/api/qt/clist/get?...' ... with urllib.request.urlopen(req, timeout=15) as r:
Only run it if you are comfortable with that external data source and network access.
The documented command may fail or behave unexpectedly unless run as a Python script.
The script requires Python, but the registry requirements list no required binaries and SKILL.md shows a bash invocation. The bundled code is visible and uses only the standard library, so this is mainly an execution-contract mismatch.
#!/usr/bin/env python3
Use a Python invocation or ensure the skill metadata/documentation declares Python clearly.
Scan results may persist in memory and the hardcoded path may fail or write somewhere other than the expected current-user workspace.
The scanner writes generated reports into an OpenClaw memory path, and the path is hardcoded to a specific user directory rather than the current user's home.
REPORT_FILE = "/Users/hushuizhen/.openclaw/workspace/memory/main-force-scan-{date}.md"Confirm the output path before running, and delete old reports if you do not want them retained.