ClawHub

悟道 · A股资金分析

v1.0.1

悟道 · A股资金分析：异动检测、资金流向、北向资金、板块轮动、股票关联、概念排行与成分股。Use when: user asks about A股, 资金, stock anomalies, capital flow, money flow, northbound capital, sector rotatio...

⭐ 0· 166·0 current·0 all-time
bywudao@jcdreamjc
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the documented endpoints (anomalies, capital flow, sector analysis, correlation, concepts). Required env vars (LB_API_KEY, LB_API_BASE) align with a remote API integration and are expected.
✓
Instruction Scope
SKILL.md confines runtime actions to HTTP calls to the listed endpoints, checks for the two declared env vars, and instructs the agent to prompt the user to configure them if missing. It does not request unrelated files, system paths, or other credentials.
✓
Install Mechanism
No install step or code is included (instruction-only), so nothing is written to disk and no packages are pulled. This is the lowest-risk install profile.
ℹ
Credentials
Only LB_API_KEY and LB_API_BASE are required, which is proportional for a third‑party API integration. Note: LB_API_BASE is user-settable; if pointed to a malicious endpoint it would receive the API key and requests, so users should ensure they set it only to the intended provider (the doc suggests https://stock.quicktiny.cn).
✓
Persistence & Privilege
always is false and the skill has no install-time persistence or requests to modify other skills or global config. Autonomous invocation is enabled by default (normal) but not combined with other high-risk privileges.
Assessment
This skill appears to do exactly what it claims: call a stock-data API. Before installing, verify the API provider (https://stock.quicktiny.cn) is trustworthy. Provide a dedicated API key (do not reuse high‑privilege keys), and set LB_API_BASE only to the official provider URL—if you must point it elsewhere, only do so for endpoints you trust. Monitor API key usage and be ready to revoke it if you see unexpected requests. Remember that the agent will send your LB_API_KEY to the configured LB_API_BASE when invoked.

Like a lobster shell, security has layers — review code before you run it.

latestvk975ej8kbdk2chf3n0e18gp1as83grrx

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🔍 Clawdis
EnvLB_API_KEY, LB_API_BASE

Comments