Stock Analysis CN
v1.0.0一键分析A股：技术面+估值+风险+基本面全覆盖，自动生成Word投资报告。基于腾讯财经API，内置行业专用估值基准。
⭐ 0· 113·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (A股 analysis, Tencent Finance API, report generation) match the included scripts and docs: technical, valuation, risk, fundamental analysis modules and a report generator that call Tencent/Eastmoney endpoints. Nothing in the files requests unrelated cloud credentials or system privileges.
Instruction Scope
Runtime docs and scripts instruct network requests to public finance endpoints (Tencent Finance, Eastmoney, CSIndex, etc.) and HTML/JS scraping for some sources. The README/api docs explicitly mention Jisilu requiring login and advise using Selenium/Playwright or asking the user for a session cookie — that could cause the skill (or operator) to request sensitive cookies/credentials if the user chooses that path. Examples also reference using pandoc/curl and writing cache files; these are expected but the SKILL.md does not declare these external tools as requirements.
Install Mechanism
No install spec is provided (instruction-only installation). The skill contains plain Python scripts (no packaged install, no remote installers or downloads). That is low risk from an installer perspective; installing involves copying files into the user's skills directory or using ClawHub as documented.
Credentials
The skill declares no required environment variables or credentials, which aligns with its use of public/scraped data. However, the docs discuss optional workflows that may require user-provided session cookies (Jisilu) or paid API credentials for premium data sources. If the user supplies session cookies or API keys to access gated endpoints, those are sensitive and should be treated carefully. The skill does not itself attempt to read system secrets or request unrelated credentials.
Persistence & Privilege
The skill does not request always:true and is user-invocable only. It caches data to local files (cache directory suggested in docs) and the report generator writes output (Markdown/Word via pandoc) — normal behavior for this type of tool. It does not modify other skills or system-wide agent settings.
Assessment
This skill appears to do what it claims: fetch public A‑share market data, perform multi‑dimensional analysis, and generate reports. Before installing, consider: (1) it makes outbound network requests to Tencent Finance, Eastmoney, CSIndex, Jisilu and similar sites — allow only if you trust these sources; (2) some data (Jisilu) may require login/session cookies or automation (Selenium/Playwright); do not paste sensitive session cookies or credentials unless you understand the risk; (3) example workflows call external tools (curl, pandoc, possibly Selenium) which are not declared as required env/binaries — ensure you have or want these tools installed; (4) the skill caches data to disk under the skill directory — review and manage those files if you care about disk storage or privacy; (5) fundamental data fetching currently contains placeholder/mock implementations in places (see fundamental_analysis.get_financial_statements) so verify outputs before relying on them for investment decisions. Overall the skill is internally coherent, but be cautious about providing any login/session tokens and validate the data sources and dependencies you enable.Like a lobster shell, security has layers — review code before you run it.
analysisvk971cm249dy0jjq13twg2523x5838acxlatestvk971cm249dy0jjq13twg2523x5838acxreportingvk971cm249dy0jjq13twg2523x5838acxscreeningvk971cm249dy0jjq13twg2523x5838acx
License
MIT-0
Free to use, modify, and redistribute. No attribution required.