Akshare Stock.Tmp
v1.0.0A股量化数据分析工具，基于AkShare库获取A股行情、财务数据、板块信息等。用于回答关于A股股票查询、行情数据、财务分析、选股等问题。
⭐ 0· 190·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description match the code and instructions: the skill uses the AkShare library to retrieve A‑share quotes, K‑lines, financials, board data, etc. There are no unrelated environment variables or binaries requested. Notable inconsistencies: _meta.json content (ownerId, slug, version) does not match the registry metadata in the submission, which suggests packaging/metadata drift that should be checked.
Instruction Scope
SKILL.md stays on topic: it tells the user/agent to pip install akshare and shows example calls to AkShare functions. It does not instruct accessing unrelated files, credentials, or external endpoints beyond AkShare's normal network calls. It warns about network issues and suggests local testing.
Install Mechanism
No automated install spec is included (instruction-only), but the README recommends pip install akshare. Using pip is expected for Python libs, but pip installs can execute arbitrary package install hooks—install in a virtual environment and verify package provenance if you are cautious.
Credentials
The skill requests no environment variables, credentials, or config paths. This is proportionate to the stated purpose. Be aware AkShare makes outbound network requests to public data sources (normal for this functionality).
Persistence & Privilege
Skill is user-invocable, not always-enabled, and does not request persistent elevated privileges or attempt to modify other skills or global agent config.
Assessment
This skill appears to do what it says: use AkShare to fetch A‑share market and financial data. Before installing/using it: 1) Review and run the included script in a disposable environment (virtualenv/container) — there is a runtime bug in scripts/stock_cli.py (get_fund_flow calls stock_individual_fund_flow without the ak. prefix), and other minor robustness issues; 2) Confirm the package source when running pip install akshare (use PyPI, check version/signature) because pip installs run code at install time; 3) Note that AkShare performs network calls to third‑party data providers — queries may be sent to external servers and could be logged by those providers; 4) Investigate the metadata mismatch (_meta.json vs registry metadata) to ensure you're installing the intended package/version and author. If you need higher assurance, ask the publisher for a signed release or run the tool in an isolated sandbox.Like a lobster shell, security has layers — review code before you run it.
latestvk97dq18smh8ctx8bej9wvw8max836n83
License
MIT-0
Free to use, modify, and redistribute. No attribution required.