investoday-stock-valuation-analysis
v1.3.0面向A股个股估值分析，聚焦PE、PB、PS、PEG、历史分位、行业比较与估值匹配度判断。基于今日投资金融数据接口，自动识别股票代码并输出结构化估值分析报告。触发词：估值分析、贵不贵、便宜不便宜、历史分位、PEG、PE、PB。
⭐ 1· 152·1 current·1 all-time
byinvestoday@kenneth-bro
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the instructions: the SKILL.md clearly defines A股估值 analysis (PE/PB/PS/PEG/historical percentiles/industry comparison) and the runtime steps call only finance-related tool IDs exposed by the declared dependency 'investoday-finance-data'. No unrelated binaries, env vars, or system paths are requested.
Instruction Scope
Runtime instructions are narrowly scoped to: identify ticker (search) and call specific finance endpoints (basic-info, valuation, valuation-hist, val-indicators, profit-ability, growth-ability, report ratings). The skill does not instruct reading local files, environment variables, or sending data to third‑party endpoints itself. It does, however, assume the availability and correct behavior of the referenced 'investoday-finance-data' tool — that dependency implements the actual API calls and auth.
Install Mechanism
No install spec and no code files — instruction-only skill. This minimizes on-disk code risk; nothing is downloaded or extracted by this skill.
Credentials
This skill declares no required env vars or credentials itself, which is proportional. However, it delegates all data access to 'investoday-finance-data'; that other skill may require API keys or tokens. Verify the dependent skill's env/credential demands before trusting data flows, because auth/exfiltration risk would come from that dependency, not this skill.
Persistence & Privilege
always:false and user-invocable:true (normal). The SKILL.md states it does not store query records. There is no instruction to modify other skills or system-wide settings.
Assessment
This skill itself is coherent and low-risk: it only specifies how to call finance endpoints exposed by another skill and doesn't request credentials or install code. Before installing or enabling it, check the referenced dependency 'investoday-finance-data': review that skill's SKILL.md and any required environment variables or network endpoints (API hosts). Confirm who operates that data provider, what credentials it requires, and whether it logs or transmits queries outside your environment. If you cannot inspect the dependent skill, treat the combined capability as higher-risk and avoid using it with sensitive accounts. If you plan to allow autonomous invocation, consider restricting that until you verify the provider and its auth/telemetry practices.Like a lobster shell, security has layers — review code before you run it.
historical-percentilevk97bgx22kj5sy01s9b8yxyevz183sdprindustry-comparisonvk97bgx22kj5sy01s9b8yxyevz183sdprlatestvk97bgx22kj5sy01s9b8yxyevz183sdprmargin-of-safetyvk97bgx22kj5sy01s9b8yxyevz183sdprpb-valuationvk97bgx22kj5sy01s9b8yxyevz183sdprpe-valuationvk97bgx22kj5sy01s9b8yxyevz183sdprpeg-analysisvk97bgx22kj5sy01s9b8yxyevz183sdprvaluation-analysisvk97bgx22kj5sy01s9b8yxyevz183sdprvaluation-positionvk97bgx22kj5sy01s9b8yxyevz183sdpr
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
💰 Clawdis