A股分时量能分析
PassAudited by ClawScan on May 1, 2026.
Overview
This skill appears to match its stated purpose: it fetches A-share market data and manages a local portfolio file, with only expected notes about external quote requests, local storage, and the uv runner.
Before installing, make sure you are comfortable with a local file containing your holdings and cost basis, and with stock symbols being sent to Sina Finance for quote lookup. The skill does not show brokerage trading or credential access, but its portfolio commands do change local records, so review them before running.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The skill may not run unless `uv` is already installed, and users need to obtain that runner separately.
The documented commands require `uv`, while the registry requirements declare no required binaries. This is a setup transparency issue rather than hidden or unsafe installation behavior.
`uv run {baseDir}/scripts/analyze.py 600789`Declare `uv` as a required binary or document a plain Python alternative; install `uv` only from a trusted source.
Sina Finance can see which stock symbols are queried, including symbols from portfolio analysis, but the shown code does not send cost or quantity data.
The script sends requested stock symbols to Sina Finance to retrieve quote data. This is disclosed in the skill description and fits the market-data purpose.
url = f"https://hq.sinajs.cn/list={codes_str}"Use the skill only if you are comfortable sending queried stock codes to Sina Finance for quote retrieval.
If invoked with the wrong stock code, a local portfolio record can be changed or removed.
The portfolio tool can remove saved holdings records. This is expected for a portfolio-management skill, but it is a local data-changing action.
portfolio["positions"] = new_positions
save_portfolio(portfolio)
print(f"已删除: {code}")Review add, update, and remove commands before running them, and back up `portfolio.json` if the records are important.
Your holdings, cost basis, quantities, and timestamps may remain on disk and be readable by anyone or any process with access to that file.
The skill persistently stores portfolio information, including cost and quantity, in a local JSON file for later analysis.
PORTFOLIO_FILE = Path.home() / ".clawdbot" / "skills" / "a-stock-analysis" / "portfolio.json"
Only enter portfolio data you are comfortable storing locally; protect or delete the portfolio file when needed.