Trading Agents 简化版
v2.4.2多智能体股票交易信号分析框架。当用户提供股票代码要求分析投资建议时触发。输入一只股票代码，通过7个SubAgent协作分析（基本面研究员、市场信息研究员、新闻研究员、社交媒体研究员、看涨分析师、看跌分析师、投资组合经理），输出买入/卖出/持有建议及决策依据。触发词："分析这只股票"、"给我投资建议"、"这只票值得...
⭐ 2· 180·0 current·0 all-time
by@laigen
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill claims to run a multi-agent trading analysis and legitimately requires a Tushare Pro token for market/fundamental data; an optional Brave Search API key for web search is reasonable. The provided Python scripts call Tushare and compute indicators consistent with the described functionality.
Instruction Scope
Runtime instructions restrict credential access to TUSHARE_TOKEN and BRAVE_API_KEY and require redaction of any credentials from subagent outputs. The skill writes complete reports (including all subagent outputs and debate history) to ~/.openclaw/workspace/memory/reports/*.md — this is expected for the stated purpose but creates a privacy surface: if any subagent input inadvertently contains sensitive strings, the flow depends on correct redaction rules. Review and test the redaction logic before using with any sensitive inputs.
Install Mechanism
The software uses standard PyPI packages (tushare, pandas, numpy) which is proportionate. One minor inconsistency: the top metadata stated 'No install spec' while skill.json and SKILL.md include pip install instructions; this is not harmful but should be noted. No downloads from unknown hosts or archive extracts are present.
Credentials
Only TUSHARE_TOKEN is required (BRAVE_API_KEY optional). No unrelated credentials or system paths are requested. The included scripts read TUSHARE_TOKEN from the environment and use it for Tushare API calls — proportional to the stated purpose.
Persistence & Privilege
The skill is not always-enabled and does not request elevated platform privileges. It writes reports to a localized workspace path (documented). Autonomous invocation is allowed by default (platform behavior) but is not combined with any elevated credential requests or 'always: true' — no excessive persistence privileges observed.
Assessment
This skill appears to be what it says: a multi-agent stock research framework that uses Tushare and optional web search and writes a markdown report locally. Before installing or running it: 1) Keep your TUSHARE_TOKEN and BRAVE_API_KEY only in environment variables (do not paste them into chat or reports). 2) Inspect and test the redaction behavior: the skill saves full subagent outputs into a final report, so if any subagent output contains credential-like strings the redaction must reliably remove them — validate with non-production tokens first. 3) Run in an isolated environment or sandbox (virtualenv/container) because it will pip-install packages and make network calls to api.tushare.pro (and web search if configured). 4) Verify the pip install step (tushare, pandas, numpy) matches your platform policy and is acceptable. 5) Understand that the tool fetches external data (Tushare, web search) — using it transmits queries to those services. 6) For privacy/regulatory reasons, avoid feeding any personal or secret information into prompts/subagents. If you need higher assurance, review the SKILL.md and included scripts line-by-line or run them with a dummy Tushare token to observe actual behavior.Like a lobster shell, security has layers — review code before you run it.
Equityvk979jjspc5p9pr2kp7awz5z36n83nav9Financevk979jjspc5p9pr2kp7awz5z36n83nav9Investmentvk979jjspc5p9pr2kp7awz5z36n83nav9equityvk976qryy0mz39m5xwta43rkzzh83kea2financevk97afc1avmkmcrgdzjza68d5g583jkyzinvestmentvk976qryy0mz39m5xwta43rkzzh83kea2latestvk979jjspc5p9pr2kp7awz5z36n83nav9
License
MIT-0
Free to use, modify, and redistribute. No attribution required.