悟道 · A股市场情报
Security checks across static analysis, malware telemetry, and agentic risk
Overview
This is a coherent instruction-only stock-market data skill that uses a disclosed external API key and shows no destructive, deceptive, or persistent behavior.
This skill appears safe to install if you intend to use the stock.quicktiny.cn market-data API. Configure only the official LB_API_BASE URL, protect the API key, and treat any market analysis as informational rather than investment advice.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The API key may grant access to the user's stock-data provider account or quota, but the documented use is limited to read-only market information requests.
The skill requires a provider API key and base URL to authenticate requests to the external stock-data service.
export LB_API_KEY="lb_your_key_here" export LB_API_BASE="https://stock.quicktiny.cn/api/openclaw"
Use a dedicated API key, keep LB_API_BASE set to the official provider URL, and revoke the key if the skill is no longer used.