Quant Tools 1.0.0
v1.0.0学术导向量化研究工具集。包含7大核心库(因子分析、组合优化、AI增强、因果验证、衍生品定价、回测引擎、情感分析)和5大投研工具(VeighNa交易框架、Qlib AI投研、WTP高性能框架、AkShare数据接口、JupyterHub研究环境)。适用于策略研发、因子挖掘、论文复现、资产配置、API服务化等投研任务...
⭐ 0· 98·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (quant research toolbox) matches the content: listed libraries (AlphaLens, VectorBT, PyPortfolioOpt, FinRL, FinBERT, EconML, QuantLib, VeighNa, Qlib, WonderTrader, AkShare, JupyterHub) and recommended architectures are consistent with a research/development toolkit.
Instruction Scope
SKILL.md is high-level documentation and examples for using the named libraries; it does not instruct the agent to read unrelated files, exfiltrate data, or call external endpoints beyond referencing public GitHub repos and recommending typical deployment patterns.
Install Mechanism
No install spec and no code files are included (instruction-only). There is nothing downloaded or written by the skill itself, which minimizes on-disk risk.
Credentials
The skill declares no required environment variables or credentials, which is internally consistent. Note: many recommended tools (VeighNa for live trading, JupyterHub, cloud training for FinBERT/VectorBT, or data sources) will require credentials, GPU access, network exposure, and other secrets when you actually deploy them — but those are not requested by this skill itself.
Persistence & Privilege
always is false and the skill is user-invocable; it does not request permanent presence or attempt to modify other skills or system-wide settings. Autonomous invocation is allowed by default but is not combined with any other elevated privileges in this package.
Assessment
This skill is a documentation/architecture guide pointing you to many legitimate open-source quant projects — it appears coherent and not malicious. Before using the guidance in production, consider: (1) provenance: the skill has no homepage and an unknown source — ask the author for provenance or a trusted repository/packaged release; (2) dependency risk: following the guide will lead to installing many third-party packages — pin versions, audit dependencies, and prefer official GitHub releases or package registries; (3) credential handling: live-trading frameworks (VeighNa, broker integrations), cloud GPUs, and data APIs require secrets — store them securely (vault, env with least privilege), and never paste them into chat; (4) network exposure: JupyterHub, FastAPI services, or trading gateways must be behind TLS, auth, and network isolation; (5) sandbox first: test heavy-resource tools (VectorBT, FinBERT) in isolated, resource-limited environments (Docker, k8s namespaces) to avoid accidental data leaks or runaway compute costs; (6) licensing & compliance: check each project's license and ensure your use (especially anything public-facing or paid advice) complies with regulations. If you want a deeper safety check, provide any planned deployment scripts, Dockerfiles, or a list of exact package versions you intend to install so those can be reviewed for risky install sources or suspicious post-install actions.Like a lobster shell, security has layers — review code before you run it.
analysisvk9767wsynda03kf265r1by809s84hg1pdatavk9767wsynda03kf265r1by809s84hg1pfinancevk9767wsynda03kf265r1by809s84hg1platestvk9767wsynda03kf265r1by809s84hg1pquantvk9767wsynda03kf265r1by809s84hg1presearchvk9767wsynda03kf265r1by809s84hg1p
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
