Fund Invest Advisor
v2.3.4基金投资顾问。基金筛选、定投策略、资产配置、风险评估、收益计算、再平衡建议。Fund investment advisor with screening, DCA strategy, asset allocation, rebalancing. 基金理财、定投计划、投资组合、资产配置。Use when makin...
⭐ 2· 772·6 current·7 all-time
byBytesAgain2@ckchzh
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (fund investment advisor) matches the included code and docs: both scripts implement calculators, allocation and rebalancing suggestions, tips, and a local portfolio store. Minor inconsistencies: registry metadata earlier showed no homepage/source while SKILL.md lists a homepage and GitHub source; and two scripts are present (scripts/fund.sh and scripts/script.sh) with overlapping but different CLIs — not harmful but a slight packaging inconsistency.
Instruction Scope
SKILL.md instructs the agent to run local scripts (scripts/fund.sh). The scripts perform only local computation, print guidance, and read/write portfolio files under a user data directory. The instructions do not reference or attempt to read unrelated system files, secrets, or network endpoints. They do create and use persistent local files for portfolio/history.
Install Mechanism
This is an instruction-only skill with included scripts (no install spec). No remote downloads or package installs are performed by the skill bundle itself, so there is no elevated install risk.
Credentials
The skill requires standard shells and Python (documented). It does not request environment variables or secrets. It optionally respects FUND_DIR / XDG_DATA_HOME / HOME to determine its data directory (expected for a CLI that stores data). No unrelated credentials or sensitive env vars are requested.
Persistence & Privilege
The scripts create and write to a data directory (default: $XDG_DATA_HOME or $HOME/.local/share/fund-invest-advisor), a portfolio JSONL file, and a history.log. This is a normal behavior for a local portfolio tool but does mean the skill will persist user data on disk. always:false (not force-included) and no elevated privileges are requested.
Assessment
This skill appears to do what it claims: local fund calculations and a simple local portfolio CLI. Before installing/run: (1) Review the scripts yourself if you can — they are plain Bash/Python and readable. (2) Be aware the tool stores data under $XDG_DATA_HOME or $HOME/.local/share/fund-invest-advisor (portfolio.jsonl and history.log); if you care about privacy, inspect or move that directory and back it up. (3) There is no network access or secret exfiltration in the code, but the skill is not a substitute for professional financial advice — double-check calculations and assumptions before acting on them. (4) Note small packaging inconsistencies (two scripts, metadata homepage/source mismatch); these are not malicious but you may want the publisher/source verified if provenance matters.Like a lobster shell, security has layers — review code before you run it.
chinesevk976kn3w550dsec8sn9ht9ffqn82nbs2financevk976kn3w550dsec8sn9ht9ffqn82nbs2investmentvk976kn3w550dsec8sn9ht9ffqn82nbs2latestvk970fv6g4pqy63a6ywpavmvbsd8323vb
License
MIT-0
Free to use, modify, and redistribute. No attribution required.