Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Stock Filter Skills

股票多条件筛选、热门因子管理、Jiuyan 数据查询和抖音热点分析。提供 15 个 CLI 工具覆盖四大模块。

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 34 · 0 current installs · 0 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The name/description (stock filtering, Jiuyan, Douyin hotspots) align with the code: the JS tools call an API under STOCK_API_BASE_URL using STOCK_API_KEY. Required binaries (node) and primaryEnv are appropriate. However the README contains many Python-related commands and references (pip, python -m, server.py, requirements.txt) that do not match the provided Node implementation — this is inconsistent and may indicate sloppy packaging or copy/paste errors.
Instruction Scope
SKILL.md instructions are limited to installing npm deps, setting STOCK_API_BASE_URL/STOCK_API_KEY (or .env), and running node src/main.js <tool> with JSON parameters. The runtime instructions do not ask the agent to read unrelated system files or access credentials beyond the declared envs. The code uses fetch only to the configured API_BASE_URL + /api/v1 paths.
Install Mechanism
There is no external install script in the skill metadata; the included package.json depends only on dotenv from npm. No downloads from arbitrary URLs or extract steps are present. The skill is instruction+source packaged, and running npm install will pull a well-known npm package (dotenv).
Credentials
The skill requires STOCK_API_BASE_URL and uses STOCK_API_KEY as the primary credential — both are proportional to an API client skill. One nuance: config.js loads a .env file from the project root (resolve __dirname/../.env), so if you run this from a directory that shares a .env with unrelated services you may unintentionally expose other secrets during local testing; confirm the .env contents before running.
Persistence & Privilege
The skill does not request always:true, does not modify other skills, and has no special persistence or elevated privileges. Autonomous model invocation is allowed by default (normal for skills) but is not combined here with broad credential access.
What to consider before installing
This skill appears to implement exactly what it says: a Node-based CLI that calls your stock service API and requires STOCK_API_BASE_URL and STOCK_API_KEY. Before installing: 1) Verify STOCK_API_BASE_URL points to a trusted API (requests will be sent there with X-API-Key header). 2) Inspect or create a dedicated API key with least privileges and rotate it if you suspect reuse. 3) Note the README/documentation inconsistencies (references to Python, pip, server.py and files that are not present) — this suggests the package was copied or packaged sloppily; ask the author or inspect source before trusting. 4) Check any .env file used (project root) to ensure it doesn't contain other unrelated secrets. 5) Run npm install and exercise the skill in an isolated/test environment first. If you need higher assurance, request the author to fix the README and provide a clear provenance/homepage for the skill.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.2.0
Download zip
latestvk979rc92scm65fcqjt4kt37scs831hwj

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

📈 Clawdis
Binsnode
EnvSTOCK_API_BASE_URL
Primary envSTOCK_API_KEY

SKILL.md

Stock Filter Skills

股票多条件筛选、热门因子管理、Jiuyan 数据查询和抖音热点分析。

当用户提到股票筛选、股票搜索、股票详情、股票分析、热门因子、因子预设、jiuyan/韭研、抖音热点等话题时,使用本技能。

Setup

安装依赖:

cd {baseDir} && npm install

需要配置以下环境变量(在 OpenClaw config 中设置 skills.entries.stock-filter-skills.env):

  • STOCK_API_BASE_URL: API 服务地址(必填)
  • STOCK_API_KEY: API 认证密钥(必填,联系后端管理员申请)
  • STOCK_API_TIMEOUT: 请求超时秒数(可选,默认 30)

使用方式

所有工具通过 CLI 调用,格式为:

node src/main.js <tool_name> '<JSON 参数>'

无参数的工具直接调用:

node src/main.js <tool_name>

工作目录必须为 {baseDir}

工具列表

股票筛选模块

stock_filter — 多条件筛选股票,支持分页排序

node src/main.js stock_filter '{"filters": {"market": ["sh"]}, "page": 1, "page_size": 20, "sort_field": "pe", "sort_order": "asc"}'

参数: filters(object, 筛选条件), page(int, 页码), page_size(int, 每页数量), sort_field(string, 排序字段), sort_order(string, asc/desc)

stock_filter_options — 获取所有可用筛选维度和选项(无参数)

node src/main.js stock_filter_options

使用 stock_filter 前应先调用本工具了解有哪些维度可用。

stock_search — 按关键词搜索股票

node src/main.js stock_search '{"keyword": "贵州茅台", "limit": 10}'

参数: keyword(string, 必填, 搜索关键词), limit(int, 可选, 返回上限默认10)

stock_detail — 获取股票详细指标(PE/PB/ROE/毛利率/负债率/营收/净利润/大单/概念板块)

node src/main.js stock_detail '{"code": "600519"}'

参数: code(string, 必填, 股票代码)

热门因子模块

hot_factor_list — 获取因子预设列表(无参数)

node src/main.js hot_factor_list

hot_factor_create — 创建因子预设

node src/main.js hot_factor_create '{"name": "成长股筛选", "factors": ["roe_high", "revenue_growth"]}'

参数: name(string, 必填, 预设名称), factors(array, 必填, 因子ID列表)

hot_factor_update — 更新因子预设

node src/main.js hot_factor_update '{"preset_id": "xxx", "name": "新名称"}'

参数: preset_id(string, 必填), name(string, 可选), factors(array, 可选)

hot_factor_delete — 删除因子预设(不可恢复)

node src/main.js hot_factor_delete '{"preset_id": "xxx"}'

参数: preset_id(string, 必填)

hot_factor_use — 使用预设并增加计数

node src/main.js hot_factor_use '{"preset_id": "xxx"}'

参数: preset_id(string, 必填)

hot_factor_sort — 调整预设排序

node src/main.js hot_factor_sort '{"preset_ids": ["id1", "id2", "id3"]}'

参数: preset_ids(array, 必填, 按期望顺序排列的ID列表)

Jiuyan 数据模块

jiuyan_stock_analysis — 获取股票综合分析

node src/main.js jiuyan_stock_analysis '{"stock_code": "300236"}'

参数: stock_code(string, 必填, 股票代码)

jiuyan_stock_theme — 获取股票主题/题材数据

node src/main.js jiuyan_stock_theme '{"stock_code": "300236"}'

参数: stock_code(string, 必填, 股票代码)

jiuyan_articles — 批量获取文章详情

node src/main.js jiuyan_articles '{"article_ids": "id1,id2,id3"}'

参数: article_ids(string, 必填, 逗号分隔的文章ID)

抖音热点模块

douyin_hotspot_list — 获取抖音热点列表

node src/main.js douyin_hotspot_list '{"page": 1, "page_size": 20}'

参数: page(int, 可选, 默认1), page_size(int, 可选, 默认20)

douyin_hotspot_detail — 获取热点详情

node src/main.js douyin_hotspot_detail '{"aweme_id": "xxx"}'

参数: aweme_id(string, 必填, 热点ID)

错误处理

所有工具返回 JSON。错误时格式为 {"error": "描述"}。常见错误:认证失败(检查 API Key)、连接失败(检查服务是否启动)、参数错误。

典型使用流程

  1. 筛选股票:先 stock_filter_options 获取维度 → 再 stock_filter 执行筛选
  2. 查股票:stock_search 搜索 → stock_detail 查详情
  3. 分析股票:jiuyan_stock_analysis 获取分析 → jiuyan_stock_theme 查看主题
  4. 管理预设:hot_factor_list 查看 → hot_factor_create/update/delete 操作
  5. 看热点:douyin_hotspot_list 浏览 → douyin_hotspot_detail 查详情

Files

8 total
Select a file
Select a file to preview.

Comments

Loading comments…