港股卖空数据

PassAudited by ClawScan on May 1, 2026.

Overview

The skill appears to fetch public HKEX/ETNet short-selling data as advertised, with routine notes about unpinned Python dependencies, outbound web requests, and local CSV storage.

Before installing, use a Python virtual environment, review or pin the listed dependencies, and expect the skill to contact HKEX/ETNet and save public market-data CSV files under the OpenClaw workspace.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Using the skill will contact HKEX and ETNet to fetch market data.

Why it was flagged

The skill performs outbound HTTP requests to the disclosed public data sources, which is necessary for its stated function.

Skill content
MAIN_URL = "https://www.hkex.com.hk/chi/stat/smstat/ssturnover/ncms/ashtmain_c.htm"
GEM_URL = "https://www.hkex.com.hk/chi/stat/smstat/ssturnover/ncms/ashtgem_c.htm"
...
resp = requests.get(url, headers=self.headers, timeout=30)
Recommendation

Use it only where outbound web access to those public financial-data sites is acceptable, and follow the sites' usage terms.

What this means

Users may install whatever package versions are current at install time, which can affect reproducibility and supply-chain exposure.

Why it was flagged

The setup instructions require manual installation of unpinned PyPI packages, while the registry install spec declares no automated dependency setup.

Skill content
pip install requests pandas beautifulsoup4
Recommendation

Install in a virtual environment and consider pinning or reviewing dependency versions before use.

What this means

Public market data may accumulate locally and be reused for later historical queries.

Why it was flagged

The skill persists fetched market data across runs in local CSV files.

Skill content
data_dir = os.path.expanduser("~/.openclaw/workspace/data/hk-short")
...
code_df.to_csv(code_file, index=False, encoding='utf-8')
Recommendation

Review or delete the CSV files if you no longer want the local history cache.