stock-diagnosis
v1.0.0面向沪深京A股的单票综合诊断能力。适用于用户提出“这只股票整体怎么样”“是否值得继续持有/加仓/减仓”“当前风险和机会如何”等泛化问题时，返回结构化的Markdown诊断报告。每次仅分析一只股票，不处理港股/美股及多标的对比。触发核心条件：用户问法为概括性诊断，未指定某个单一技术指标或财务指标（如MACD、RSI...
⭐ 0· 35·0 current·0 all-time
byGingin@gracexiaoo
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill description (A-share single-stock diagnosis) matches the implementation: the script POSTs the user's natural-language question to an Eastmoney stock-analysis endpoint and returns/saves the API's Markdown. The only required env var is EM_API_KEY which is exactly what the code uses for API auth. Minor mismatches: SKILL.md refers to the public mxClaw page (ai.eastmoney.com/mxClaw) while the script calls a mx-saas-platform-test.eastmoney.com proxy endpoint, and example output directories in docs differ from the code's DEFAULT_OUTPUT_DIR (miaoxiang/stock_diagnosis). These are notable but not evidence of malicious behavior.
Instruction Scope
The SKILL.md and script stay within the stated scope: they only handle one A-share question, call a single remote API, extract displayData, and optionally save it as a .md file. Important runtime behavior: user questions (the full natural-language prompt) are transmitted to a third-party API (Eastmoney). This is required for the skill to function but does expose user query text to that external service; the SKILL.md does advise about key handling.
Install Mechanism
No install spec is present (instruction-only with a small helper script). Nothing is downloaded or written during install — low risk.
Credentials
Only a single env var (EM_API_KEY) is required and that maps directly to the API key needed to call the Eastmoney endpoint. This is proportionate. Reminder: possession of EM_API_KEY grants the skill access to the remote API on your behalf, so verify the key's permissions, expiry, and revocation options.
Persistence & Privilege
The skill is not marked always:true and does not request modifications to other skills or system-wide settings. It only writes its own output files to a subdirectory under the current working directory when saving results.
Assessment
This skill behaves as a wrapper around an Eastmoney stock-analysis API and requires you to provide EM_API_KEY. Before installing: (1) Confirm the API key source, scope, and that you are comfortable sending user queries to Eastmoney (the script posts the full question to their endpoint); (2) Note the script currently calls a host containing "-test" (mx-saas-platform-test.eastmoney.com) — confirm whether you expect a staging or production endpoint; (3) The script will create a local directory (DEFAULT: ./miaoxiang/stock_diagnosis) and save Markdown files there unless --no-save is used — ensure this is acceptable for where sensitive data might be stored; (4) Verify you can revoke/reset EM_API_KEY if needed. If any of these raise concerns, request a version that points to the verified production API endpoint or audit the key's permissions before use.Like a lobster shell, security has layers — review code before you run it.
latestvk97a12rsgrqcjscjzggn8ctmqh84vwb1
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
EnvEM_API_KEY