my_stock_report_mgnt_skill
v1.0.0当且仅当用户明确提到“分析报告多维表”或“my_stock_report_mgnt_skill”时触发。专门用于美股分析报告结论在钉钉多维表（dingtalk-ai-table）中的结构化归档（新增）与检索（查询）。
⭐ 0· 68·0 current·0 all-time
by@canonxu
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description match the instructions: collect six specified fields, validate them, and perform insert/query operations against a DingTalk multi-dimensional table. It explicitly delegates API calls to a dingtalk-ai-table skill rather than attempting to access unrelated services. The inclusion of hard-coded Base ID and Sheet ID is consistent with a skill targeted at a specific table, though users should confirm those IDs are intended.
Instruction Scope
The SKILL.md stays within the stated purpose: field collection/validation, calling the dingtalk-ai-table skill to perform inserts/reads, local filtering, and formatted display. It does not instruct reading unrelated files or environment variables. Note: it instructs fetching all records from the table and filtering locally — this is functionally reasonable but may be inefficient for very large tables and could leak more rows to the agent than strictly necessary unless the underlying dingtalk-ai-table supports server-side filtering.
Install Mechanism
No install spec and no code files (instruction-only), so nothing is written to disk or downloaded. This is the lowest-risk installation surface.
Credentials
The skill itself requests no environment variables or credentials, which is proportional. However it depends on another skill (dingtalk-ai-table) to perform API calls and thus implicitly relies on that skill to hold DingTalk credentials and network access. Users should review the dingtalk-ai-table skill's permissions and credential requirements before trusting this skill. Also, the workflow expects users to provide URLs to uploaded documents — those links may be sensitive and require appropriate access controls.
Persistence & Privilege
always:false and user-invocable:true — the skill does not request permanent inclusion or elevated platform privileges. It writes to the specified Base ID/Sheet ID (as advertised) but does not attempt to modify other skills or system-wide settings.
Assessment
This skill is internally consistent, but before installing: (1) verify the dingtalk-ai-table skill exists and review its credentials/permissions (this adapter depends on that skill to access DingTalk); (2) confirm the hard-coded Base ID and Sheet ID point to the correct table you expect the agent to modify; (3) ensure the document URLs you will store are appropriately access-controlled (they may contain sensitive reports); (4) test insert/query operations on a non-production table to validate validation, formatting, and performance (fetching all records and client-side filtering can be heavy on large datasets); and (5) if you need server-side filtering or stronger access controls, consider extending the underlying dingtalk-ai-table skill rather than fetching all rows locally.Like a lobster shell, security has layers — review code before you run it.
latestvk972hks9d6mq5smrnmxz2vmy0x83jzwk
License
MIT-0
Free to use, modify, and redistribute. No attribution required.