AI Stock Master 股票大师
v1.0.1Professional AI analysis powered by 5 investment expert models, deeply integrated with OpenClaw AI Agent | https://github.com/hengruiyun/ai-stock-master-open...
⭐ 2· 108·0 current·0 all-time
byTTFox@hengruiyun
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description promise (quantitative stock analysis via 5 models) matches the included driver and SKILL.md: all core functions are implemented as HTTP calls to the stated TTfox intelligence backend. No unrelated binaries, config paths, or credentials are requested.
Instruction Scope
SKILL.md directs the agent to call specific functions (which in turn call remote APIs) and to disclose that data comes from master.ttfox.com. The instructions do not request reading local files, environment secrets, or system state outside of calling the remote service. It explicitly restricts auto-triggering get_stock_analysis unless explicitly requested.
Install Mechanism
This is instruction-only with a small Python driver that uses the 'requests' library. There is no automated install spec; README suggests 'pip install requests'. This is low-risk but the user will need to install a runtime dependency manually.
Credentials
The skill requires no environment variables or credentials. All network calls are unauthenticated to master.ttfox.com per the driver. The lack of credentials is coherent for a public-read API, but it means queries (user tickers) are sent to a third-party server unprotected by skill-specific auth.
Persistence & Privilege
The skill does not request permanent/always-on inclusion, does not modify other skills or system settings, and does not store auth tokens. Autonomous invocation is allowed (platform default) but not escalated by special privileges.
Assessment
This skill appears to do what it says: call the TTfox intelligence server and translate results into analyst-style reports. Before installing, consider: (1) Privacy/trust — the agent will send tickers and requests to https://master.ttfox.com over the network; confirm you trust that domain and review its privacy/security posture. (2) Network access — if you need to restrict outbound requests, run the skill in a sandboxed environment. (3) Dependency — you (or your operator) must install the 'requests' Python package for the driver to function. (4) No credentials are required, so responses are unauthenticated; verify the correctness and provenance of data before acting on financial recommendations. If you want higher assurance, inspect the repository on GitHub (linked in README) and the remote API endpoints directly, or run the driver in an isolated environment first.Like a lobster shell, security has layers — review code before you run it.
latestvk979emfk2bhfvjh54theyr2pvx83exqh
License
MIT-0
Free to use, modify, and redistribute. No attribution required.