Macro Analyst
v1.0.0宏观经济分析工具集 - 基于AKShare的GDP/CPI/PMI/利率/汇率数据
⭐ 1· 838·4 current·4 all-time
by_silhouette@lanyasheng
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The description says this is an AKShare-based macro data/analysis skill, which reasonably requires Python and the akshare package. However the registry metadata declares no required binaries or dependencies. The SKILL.md explicitly expects python3.12 and akshare, so required tooling is missing from the manifest. The instructions also call scripts in other directories (e.g., skills/akshare-finance/scripts/..., workspace-trading/skills/trading-quant/...), which suggests cross-skill filesystem coupling not declared in the skill's purpose.
Instruction Scope
Runtime instructions tell the agent to execute specific local scripts and import akshare. Those scripts are not included in this skill's bundle, so following the instructions would cause the agent to search for/execute files elsewhere in the workspace. That gives the skill broad discretion to access unrelated files and code paths (and possibly sensitive local data) despite the skill not declaring such access.
Install Mechanism
There is no install spec (instruction-only), so nothing will be written to disk by the skill itself. That's lower risk, but the SKILL.md expects python3.12 and the akshare Python library without declaring them or providing an install path; missing dependency declarations reduce coherence and increase operational risk if the agent attempts to run commands that aren't available.
Credentials
The skill requests no environment variables or credentials, which is consistent with a read-only data analysis tool. However, it will likely require network access to fetch data via akshare and may indirectly read local files (the referenced scripts), neither of which are reflected in the manifest.
Persistence & Privilege
The skill is not always-enabled and does not request elevated persistence. It does not declare any self-modifying or cross-skill configuration behavior.
What to consider before installing
This skill's SKILL.md expects python3.12, the akshare package, and several local scripts under paths like skills/akshare-finance/... and workspace-trading/..., but those scripts and dependencies are not included or declared. Before installing or enabling it, ask the publisher for: (1) the repository or package that contains the referenced scripts, (2) an explicit dependency list (Python version, pip packages like akshare), and (3) confirmation that running those scripts won't read or modify unrelated workspace files. If you can't get that, only run this skill in a sandboxed environment or decline it — otherwise the agent may search for and execute code from other projects on your system.Like a lobster shell, security has layers — review code before you run it.
financevk97carxvw9z7kterntk66twcqs824gsflatestvk97carxvw9z7kterntk66twcqs824gsfmacrovk97carxvw9z7kterntk66twcqs824gsf
License
MIT-0
Free to use, modify, and redistribute. No attribution required.