jin-duo-duo-strategy

v1.0.0

基于技术分析的股票交易策略分析工具;当用户需要进行股票买卖点分析、技术形态识别、交易策略评估时使用

0· 108·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description (technical stock-strategy analysis) match the delivered artifacts: SKILL.md, a strategy guide, and a Python script that computes MA/MACD/volume and performs signal detection. Required resources (pandas/numpy) are appropriate for the stated purpose.
Instruction Scope
Runtime instructions ask the agent to accept user-provided CSV/JSON OHLCV data, run the included script, read the local references/strategy-guide.md for rule interpretation, and produce a report — all consistent with the stated analysis task. There are no instructions to read unrelated system files, environment variables, or to send data to external endpoints.
Install Mechanism
No install spec is provided (instruction-only). The package includes a local Python script and a requirements.txt listing only pandas and numpy — proportionate and expected. No remote downloads, installers, or archives are referenced.
Credentials
The skill declares no required environment variables, credentials, or special config paths. That is proportionate for a local data-analysis tool that only processes user-supplied price/volume data.
Persistence & Privilege
The package metadata has always: false and no install-time persistence. One minor inconsistency: SOUL.md states the agent 'records user history' for tracking, but there is no code in the included script that writes or manages persistent storage (no file/database/network sinks shown). If the author intends history recording, ask where/how data is stored before enabling persistence.
Assessment
This package appears coherent and limited to local technical analysis. Before installing or running it: 1) Inspect the full scripts/technical_indicators.py file locally (search for network I/O, file writes, or unexpected subprocess calls); 2) Run it in a sandbox or non-production environment and test with the provided sample_data.csv; 3) Install only the declared dependencies (pandas, numpy) in a virtualenv; 4) If you expect the agent to 'remember' past requests (SOUL.md mentions recording history), confirm where those histories are stored and whether they leak sensitive data; 5) Never feed the skill private credentials or unrelated files — it does not require them and they are unnecessary for its stated function.

Like a lobster shell, security has layers — review code before you run it.

latestvk97a1mydv624587krz2s1e58h9835rge

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments