Stock Ai Analyzer
PassAudited by ClawScan on May 1, 2026.
Overview
This appears to be a coherent A-share stock analysis skill, with expected use of a Tushare data token, external data libraries, and optional public report downloads.
Before installing, be prepared to provide and protect a Tushare token, install Python dependencies from trusted sources, and use a safe directory for optional report downloads. Treat the generated analysis as informational rather than personalized investment advice.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The skill may use your Tushare data-service token when fetching stock data.
The fetcher reads a Tushare API token from the environment or a local .env file. This is expected for Tushare market data access, but it is still credential handling.
token = os.environ.get("TUSHARE_TOKEN", "").strip() ... env_path = os.path.join(os.getcwd(), ".env")Use a dedicated Tushare token, keep .env files private, and avoid placing tokens in shared or committed directories.
You may need to install Python packages separately, which introduces normal dependency-provenance risk.
The script depends on external Python packages, while the provided install specification does not define pinned dependencies or a trusted installation source.
import pandas as pd ... import tushare as ts ... import requests ... from PyPDF2 import PdfReader
Install dependencies from trusted package sources, prefer pinned versions in your own environment, and review package provenance before use.
Using report download options can create files in the directory you specify.
The skill documents a user-directed command that can download public report PDFs to a local directory. This is purpose-aligned, but it is still local file writing.
`fetch report-raw <代码> --report-type annual --report-year 2025 --download-dir data/reports` | 下载原始报告 PDF 到本地目录
Choose a safe download directory and review downloaded files before opening them outside the analysis workflow.