Finance News Assistant
ReviewAudited by ClawScan on May 10, 2026.
Overview
This instruction-only finance report skill appears coherent and disclosed, but it uses a stock API token, can optionally push reports to Feishu, and produces investment-style recommendations users should verify.
Before installing, verify that you trust the tczlld.com stock API provider, use a narrowly scoped STOCK_API_TOKEN, configure Feishu delivery only if needed, and treat all generated buy/sell or position suggestions as non-authoritative analysis rather than trading instructions.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If configured, the agent will use a stock API token to call the declared market-data and AI-decision endpoints.
The skill requires a bearer token for the stock API, while the registry metadata lists no required environment variables or primary credential. This is disclosed in SKILL.md and aligned with the finance-data purpose, but users should notice the credential requirement.
Header: Authorization: Bearer <STOCK_API_TOKEN> ... `STOCK_API_TOKEN` | ✅ | 交易 API 认证 Token
Use a scoped token intended only for this stock-data service, store it securely, and do not reuse brokerage or trading-account credentials unless you understand the API permissions.
A user could over-rely on generated recommendations when making investment decisions.
The report format asks the agent to produce actionable financial language, including buy/hold/sell decisions and position sizing. This matches the skill purpose, but it can affect user financial decisions.
📊 AI决策参考 决策：买入/持有/卖出（置信度 XX%） ... ## 整体仓位建议 - 建议仓位：XX%
Treat the output as informational analysis, verify sources and prices independently, and consult qualified financial advice before trading.
Generated reports could be shared with the configured Feishu recipient or workspace.
The skill documents an optional Feishu recipient ID for pushing morning reports. This is disclosed and purpose-aligned, but it means reports or watchlist-related information may be sent to an external collaboration platform if enabled.
`FEISHU_RECEIVE_ID` | 可选 | 飞书接收者 Open ID，推送早报用
Enable Feishu delivery only for intended recipients and avoid including private portfolio or account information in pushed reports unless that sharing is acceptable.