CN Stock Analysis Pro
v1.0.0生成中文A股深度策略研报（HTML/PDF格式）。 当用户提到任何A股代码（6位数字）、股票名称、想分析某只股票、或要求生成研报/策略报告时，立即使用此技能。 适用场景：个股深度分析、ST股风险研判、热点题材追踪、戴帽摘帽分析、行业龙头估值分析、困境反转研判。 输出：专业排版研报，包含封面、核心观点、价格结构、数...
⭐ 0· 88·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the behavior: SKILL.md and reference files describe stepwise data collection from listed finance sites, analysis prompts, and an HTML report template — all expected for an A‑share report generator. No unrelated env vars, binaries, or install steps are requested.
Instruction Scope
Instructions require scraping/ fetching realtime data from a list of public finance websites (Eastmoney, Sina, Tencent, 10jqka, stockstar, etc.) and allow 'LLM 自主判断搜索' fallbacks. This is consistent with the stated purpose, but it relies on the agent having safe network/browsing capabilities and on site structure remaining stable; the skill also instructs multiple precise data‑extraction rules so errors in scraping could silently produce incorrect values.
Install Mechanism
No install spec and no code files — instruction-only. This minimizes disk persistence and arbitrary code execution risk. The skill assumes the agent/environment can perform web fetch/search operations, which is an environment capability rather than an install behavior.
Credentials
The skill declares no required environment variables, credentials, or config paths. Its external data needs are limited to public web sources named in references, which is proportionate to its purpose. Note: it implicitly requires outbound network/browsing access to function.
Persistence & Privilege
always is false and the skill is user-invocable; it does not request permanent/system‑wide privileges or modify other skills. No indicators of attempting to persist credentials or alter agent configuration beyond generating a local HTML report.
Scan Findings in Context
[no_code_files_to_scan] expected: Regex scanner had nothing to analyze because this is an instruction-only skill (SKILL.md + references). That is expected for a prompt/instruction driven report generator.
Assessment
This skill is internally consistent and appears to do what it claims: collect public market data, run analysis prompts, and generate an HTML/PDF research report. Before installing, confirm your agent environment has safe, permitted outbound web/browse access (it must fetch from the listed finance sites) and be aware that scraping can break if site layouts change. Because no credentials are requested, there is low direct exfiltration risk — however: (1) validate numeric outputs against a trusted source when making decisions, (2) respect data providers' terms of use, (3) run a few test analyses on well‑known tickers to verify the scraping/extraction quality, and (4) do not treat the generated reports as financial advice — always have a human review before trading.Like a lobster shell, security has layers — review code before you run it.
latestvk9783xrhkt36fefm0mntwaest184sxfr
License
MIT-0
Free to use, modify, and redistribute. No attribution required.