Stock Review

Provides daily A-share market review with data on top traders, sector limits, fund flows, streaks, sentiment, and next-day strategies.

Security Scan

The skill's stated functionality (scrape market sites and push a Markdown report to Feishu) is plausible, but the runtime instructions claim it will push to Feishu while declaring no credentials/config — that mismatch and the lack of detail about external web calls are concerning.

Purpose & Capability

The skill's purpose (daily A-share review using Eastmoney, Sina, Xueqiu) matches the instructions to fetch web data and generate a Markdown report. However, the SKILL.md says reports 'can be pushed to Feishu' but the skill declares no required credentials, webhooks, or config for Feishu — pushing to Feishu normally requires a token/webhook, so this is an unexplained gap.

Instruction Scope

Instructions direct the agent to fetch data from external websites (东方财富, 新浪财经, 雪球) using a built-in web_fetch tool and to optionally push results to Feishu. The doc does not specify rate-limiting, error handling, or exactly how Feishu delivery is authenticated. The instructions therefore authorize network collection and external transmission without specifying required endpoints/credentials.

Install Mechanism

Instruction-only skill with no install spec or code files — lowest risk for arbitrary code installation. Nothing is written to disk by an installer.

Credentials

No environment variables or credentials are declared, yet the skill implies it will push messages to Feishu. That typically requires a webhook URL or API token (sensitive). The absence of any declared credential is disproportionate to the stated external push capability.

Persistence & Privilege

The skill does not request always:true or other elevated persistence. It is user-invocable and may run autonomously per platform defaults, which is expected. No modifications to other skills or system-wide settings are described.

What to consider before installing

Before installing, ask the skill author to explain how Feishu delivery is authenticated — which env var or webhook URL is required and where it will be stored. Confirm whether the agent's built-in web_fetch will be used for scraping and whether scraping those sites complies with their terms/rate limits. If you plan to enable automatic push to Feishu, prefer supplying a scoped webhook (not broad account credentials), test the skill in a sandbox account, and require the skill explicitly declare which environment variables it will use to avoid silent credential use.

stock-review 技能

功能

A 股每日复盘分析，包括：

• 龙虎榜数据
• 板块涨停统计
• 资金流向分析
• 连板高度统计
• 舆情监控
• 次日策略建议

使用方式

手动触发

/stock-review [日期]

日期格式：YYYY-MM-DD，默认为今日

定时任务

每天 16:30 自动执行（收盘后）

输出

生成 Markdown 复盘报告，可推送到飞书

数据源

• 东方财富网（免费）
• 新浪财经（舆情）
• 雪球（可选）

配置

无需额外配置，使用内置 web_fetch 工具