investoday-stock-news-event-analysis
v1.0.0面向A股个股新闻与事件面分析，聚焦近期新闻、事件情绪、机构验证与市场反馈。基于今日投资金融数据接口，自动识别股票代码并输出结构化新闻事件分析报告。触发词：最近新闻、消息面、事件驱动、利好利空、催化、风险消息。
⭐ 0· 152·2 current·2 all-time
byinvestoday@kenneth-bro
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description ask for news/event analysis and the skill only requires INVESTODAY_API_KEY and API calls to the Investoday endpoints — those requirements match the stated purpose.
Instruction Scope
Runtime instructions are focused on calling the Investoday API via a call_api.py script (expected). However the SKILL.md references the dependency path as 'skills/investoday-finance-data/scripts/call_api.py' in one place and uses 'python skills/scripts/call_api.py' in examples elsewhere — this path inconsistency could cause runtime errors. The skill also recommends using a .env file; confirm any code that loads .env is limited to the INVESTODAY_API_KEY and does not read/transmit unrelated secrets.
Install Mechanism
Instruction-only skill with no install spec and no downloads — lowest install risk. It relies on an external skill/script to be present; verify that dependency is installed from a trusted source.
Credentials
Only a single credential (INVESTODAY_API_KEY) is required, which is appropriate for an API-backed news/finance skill. No other env vars or config paths are requested.
Persistence & Privilege
always is false and there is no install that writes files or changes system settings. The default ability for the agent to invoke the skill autonomously is unchanged — normal for skills.
Assessment
This skill appears coherent for aggregating and analyzing A‑share news using the Investoday API. Before installing or enabling it: (1) ensure you have the legitimate investoday-finance-data skill (or the referenced call_api.py) from a trusted source, because this skill delegates its network calls to that script; (2) verify the actual call_api.py implementation to confirm it only uses INVESTODAY_API_KEY and does not read or exfiltrate other files or environment variables; (3) fix or check the script path inconsistency in the SKILL.md examples so the runtime can locate the API caller; (4) store INVESTODAY_API_KEY safely (avoid putting unrelated secrets together in a .env that the skill might load); (5) if you need higher assurance, request the dependent skill's source code or run the calls in a sandbox to observe behavior. If you cannot validate the dependent script, treat the skill as untrusted.Like a lobster shell, security has layers — review code before you run it.
bullish-bearishvk971k9s0c3t5vpmrgp20kzz7hd83kxthcatalystsvk971k9s0c3t5vpmrgp20kzz7hd83kxthevent-drivenvk971k9s0c3t5vpmrgp20kzz7hd83kxthinstitutional-validationvk971k9s0c3t5vpmrgp20kzz7hd83kxthlatestvk971k9s0c3t5vpmrgp20kzz7hd83kxthmarket-reactionvk971k9s0c3t5vpmrgp20kzz7hd83kxthnews-event-analysisvk971k9s0c3t5vpmrgp20kzz7hd83kxthnews-sentimentvk971k9s0c3t5vpmrgp20kzz7hd83kxthrisk-alertsvk971k9s0c3t5vpmrgp20kzz7hd83kxth
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📰 Clawdis
EnvINVESTODAY_API_KEY
Primary envINVESTODAY_API_KEY