comparable-company-analysis
v1.0.0金融领域的可比公司分析工具，通过行业分析法对目标公司与可比公司整合经营指标、估值倍数和统计基准比较。支持A股、港股、美股市场的上市公司分析。输入单一公司问句后，调用可比公司接口并生成主题化Excel报告。适用于快速对比目标公司与同业在经营、财务、估值维度的差异。
⭐ 0· 39·0 current·0 all-time
byGingin@gracexiaoo
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description promise (call comparable-company API and produce an Excel report) matches the included scripts. The only required environment variable is EM_API_KEY which is used to authenticate requests to the declared comparable-company endpoint — this is proportionate to the stated purpose.
Instruction Scope
SKILL.md instructs running the provided Python scripts and setting EM_API_KEY only. The runtime code calls a single external API and generates an Excel file in a local directory. Minor inconsistency: the top description claims support for A/HK/US markets, but FAQ and some messages say 'currently only supports A-share', which is confusing. The CLI prints the fetched JSON (including the 'raw' API payload) — expected for debugging but it may reveal API-returned data; the skill does not read unrelated files or other env vars.
Install Mechanism
No install spec — instruction-only with included scripts. Nothing is downloaded or installed automatically by the skill, so there's low install-time risk.
Credentials
Only EM_API_KEY is required and used solely as an HTTP header to the service endpoint; that is expected. Users should note the key is transmitted to the external endpoint (mx-saas-platform-test.eastmoney.com), so granting the key gives that service access. No other secrets or unrelated credentials are requested.
Persistence & Privilege
The skill is not always-enabled and does not request elevated platform privileges. It writes Excel outputs to a subdirectory under the current working directory (miaoxiang/comparable_company_analysis) which is reasonable for a report generator.
Assessment
This skill appears to do what it says: it sends your EM_API_KEY with your query to an Eastmoney API and creates a themed Excel report locally. Before installing: (1) Confirm you trust the API host (COMPARE_API_URL is a 'mx-saas-platform-test' Eastmoney endpoint — verify whether you should send keys to a test host vs. production). (2) Understand that EM_API_KEY will be transmitted in an HTTP header to that service; use a key with limited scope and rotate it if needed. (3) The CLI prints the raw API JSON — avoid pasting logs publicly if they contain sensitive data. (4) Note the SKILL.md contains a small inconsistency about supported markets (claims A/HK/US in one place but later says only A-share). If you rely on multi-market data, verify the API behavior with test queries or review the provider's docs before using in production.Like a lobster shell, security has layers — review code before you run it.
latestvk971avws5vqhd3bakcmjrnh5vn84t55e
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
EnvEM_API_KEY