ClawHub

Initiation of Coverage Agent

v1.0.3

依托东方财富数据库，面向沪深京港美上市公司（A 股、港股、美股、北交所），生成首次覆盖报告或深度研究报告。 当用户提及「首次覆盖」「首次覆盖报告」「初始覆盖」「深度研究」「深度报告」「个股深度」「公司深度」「标的深度分析」，或要求对某只股票/上市公司撰写全面、体系化的研究报告时，必须触发本 Skill。 即使用户...

⭐ 2· 6.8k·3 current·3 all-time
byFinancial AI Analyst@financial-ai-analyst
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The name/description claim to generate first-coverage/deep-research reports using 东方财富 (EastMoney). The included script posts the user's query to an EastMoney AI SaaS endpoint (ai-saas.eastmoney.com) and requires an EM_API_KEY. Requesting a single API key for that service is proportionate and expected.
✓
Instruction Scope
SKILL.md instructs the agent to pass the user's original question to scripts/generate_deep_research_report.py. The script only reads EM_API_KEY and an optional output-dir env var, sends the query to the declared EastMoney endpoint, and writes returned base64 PDF/DOCX to a local output directory. It does not read unrelated files, other credentials, or system configs.
ℹ
Install Mechanism
This is instruction-first (no compiled install), but SKILL.md/metadata declare a python dependency (httpx) to be installed via pip. Installing httpx from PyPI is low-to-moderate risk and expected for HTTP calls. Minor inconsistency: registry metadata earlier said 'No install spec', yet SKILL.md contains an install entry — this is an administrative/meta mismatch, not an active security issue.
✓
Credentials
Only EM_API_KEY is required and is used as an API header in requests to the EastMoney endpoint; an optional output-dir env var is used to control where attachments are saved. The requested environment access is limited and consistent with the skill's function.
✓
Persistence & Privilege
The skill does not request always:true, does not persist or modify other skills, and only writes attachments under a relative output directory. It does perform network calls to the declared external service, which is expected for its purpose.
Assessment
This skill will send whatever the user types (the original query) along with EM_API_KEY to an EastMoney report-generation API and will save returned PDF/DOCX files under a ./miaoxiang/... directory (or a directory you set). Before installing: 1) Ensure your EM_API_KEY is from a trusted EastMoney/source and that you are comfortable sending queries (avoid including passwords, private PII, or other secrets in prompts). 2) Be aware the skill performs outbound network requests to ai-saas.eastmoney.com and saves files to disk; validate the files before sharing. 3) The dependency (httpx) is installed via pip — review environment package policies if necessary. 4) Note a minor metadata inconsistency (registry showed no install spec but SKILL.md declares a pip install); this is likely administrative but worth confirming with the publisher if you need strict provenance.

Like a lobster shell, security has layers — review code before you run it.

coveragevk9731bhvjprnna1r612s0hbmbh84jd4tfinancialvk9731bhvjprnna1r612s0hbmbh84jd4tlatestvk9731bhvjprnna1r612s0hbmbh84jd4treportvk9731bhvjprnna1r612s0hbmbh84jd4tresearchvk9731bhvjprnna1r612s0hbmbh84jd4tstockvk9731bhvjprnna1r612s0hbmbh84jd4t

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

EnvEM_API_KEY

Comments