Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Sentiment Analysis
v1.0.0Analyze social media sentiment related to stocks, providing sentiment scores, trend changes, discussion heat, and bot detection.
⭐ 0· 223·1 current·1 all-time
by@gbabyzs
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The skill claims crawling股吧/雪球 comments, sentiment scoring, trend analysis, and bot detection, and lists dependencies (akshare, jieba, snownlp) appropriate for that purpose. However, the main Python file contains only a placeholder analyze_stock_sentiment that returns simulated random values and does not perform any scraping, NLP, or bot detection. The skill.json also claims to export calculate_sentiment_index which is not implemented. These inconsistencies mean the package does not actually deliver the stated capabilities.
Instruction Scope
SKILL.md describes the intended functionality and shows a usage example, and instructs the user to pip install akshare, pandas, numpy, jieba, snownlp. It does not direct the agent to read unrelated system files or credentials. However, the docs promise crawling and analysis while the code is a stub — the runtime instructions therefore over-promise relative to the actual implementation.
Install Mechanism
There is no install spec; this is instruction-only and asks users to pip install standard Python packages. That is a common pattern. There are no downloads from arbitrary URLs or archive extraction steps in the package itself.
Credentials
The skill requests no environment variables, credentials, or config paths. The declared dependencies are plausible for a sentiment analysis tool; no unrelated secrets are requested.
Persistence & Privilege
The skill does not request elevated persistence ('always' is false) and does not modify other skills or system-wide agent settings. It remains user-invocable and can be invoked autonomously per platform defaults (no additional privilege requested).
Scan Findings in Context
[missing_export_function] unexpected: skill.json lists 'calculate_sentiment_index' in exports but no such function exists in sentiment_analysis.py. This is an incoherence between metadata and implementation.
[placeholder_implementation] unexpected: Code returns simulated random sentiment values and contains comments saying real implementation requires scraping and NLP libraries. A tool that claims to perform scraping, bot detection, and NLP should contain those implementations or clear disclaimers.
What to consider before installing
This package appears to be a stub: it documents crawling stock-discussion sites and bot-detection but the shipped code only returns simulated results and misses an exported function listed in skill.json. Before installing or using it, ask the author for a complete implementation or an explicit statement that this is a prototype. If you still want to run it, do not rely on its outputs for decisions (especially trading). Be cautious about running the pip installs in a production environment — consider using a sandbox or virtual environment, inspect third-party packages (e.g., akshare) yourself, and verify any network activity if/when the real scraping code is provided.Like a lobster shell, security has layers — review code before you run it.
latestvk97ab1w98gwc93z5an0dnc5gj982yc8n
License
MIT-0
Free to use, modify, and redistribute. No attribution required.