股票价值投资分析
v1.0.0A股和港股价值投资分析系统。基于《股市真规则》方法论，提供完整的投资分析框架：护城河分析、财务健康检查、DCF估值、管理层评估、行业分析、投资决策整合。Use when user needs to (1) analyze stock investment value comprehensively, (2) ev...
⭐ 1· 62·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description, documentation, and included Python scripts (DCF, moat, industry compare, watchlist, etc.) align with a value-investing analysis skill. Minor mismatch: SKILL.md and registry list no required binaries, yet the instructions and scripts rely on the python CLI (e.g., `python scripts/...`) and a Python runtime; the skill also relies on internet data (AKShare). The absence of an explicit 'requires: python' or runtime declaration is a small incoherence but not evidence of malicious intent.
Instruction Scope
Runtime instructions stay on-topic: they ask for stock codes and financial PDFs, recommend installing a separate pdf-parser skill for extracting financial tables, and describe using AKShare for public market data. There are no instructions to read unrelated system files or to exfiltrate arbitrary data. The workflow explicitly uses network data sources (AKShare) and a pdf-parser skill to process user-supplied PDFs—both expected for this purpose.
Install Mechanism
No install spec is provided (instruction-only install), which is lower-risk. However, a requirements.txt is included (akshare, pandas, numpy, requests, etc.), meaning running the scripts will install/require third‑party Python packages. There are no downloads from obscure URLs or extraction of remote archives in the package files provided. Users should be aware they must install Python and these packages manually or in a virtualenv.
Credentials
The skill does not request environment variables, credentials, or config paths. The code uses public data via AKShare and HTTP (requests), which is appropriate for financial-data fetching. No secrets or unrelated tokens are requested. The skill depends on a separate 'pdf-parser' skill to process PDFs—review that skill separately for permissions.
Persistence & Privilege
The skill is not marked always:true and does not request elevated or persistent system-wide privileges. Default autonomous invocation is allowed (platform default) but there is no evidence the skill modifies other skills or agent configs.
Assessment
This skill appears to be what it says: a value-investing analysis toolkit. Before installing or running: (1) ensure you have a Python runtime and create an isolated virtualenv; the manifest omits declaring Python though the SKILL.md runs `python scripts/...`; (2) install dependencies from requirements.txt (akshare will fetch market data from the internet); (3) review and vet the referenced pdf-parser skill because it will process any PDFs you upload (sensitive documents); (4) inspect watchlist/cron usage in scripts you plan to run to avoid unintended periodic network activity; (5) note the license prohibits commercial redistribution; and (6) do not run the scripts with elevated privileges or on systems containing sensitive credentials—no credentials are required, but the scripts will make outbound network calls. If you need higher assurance, run the scripts locally in a sandbox or review the remaining truncated script files (watchlist_manager and red_flag_checker) for any unexpected behavior before use.Like a lobster shell, security has layers — review code before you run it.
latestvk9733fs4jehndehz8b5jgca4qn840y1c
License
MIT-0
Free to use, modify, and redistribute. No attribution required.