stock-analysis-lianghua
PassAudited by ClawScan on May 10, 2026.
Overview
The skill appears to perform disclosed stock technical analysis, with expected local script execution, market-data network calls, and caching, but users should verify the exact script path and review any project-code edits.
This skill looks reasonable for stock technical analysis. Before installing, confirm it runs the intended analyze_stock.py file, install dependencies from trusted sources, expect requests to Stooq/Yahoo/yfinance, and review any TradingAgentsV2 code edits before accepting them.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Using the skill will execute a local script for stock analysis.
The skill's normal operation is to run a local Python helper script. This is disclosed and central to the stated purpose, but it is still code execution on the user's machine.
当用户要求分析某只股票时，直接执行此脚本： python .cursor/skills/stock-analysis/analyze_stock.py <股票代码> [选项]
Run only the reviewed packaged script, avoid passing unusual shell metacharacters as stock symbols, and inspect the script first if the environment is sensitive.
Ticker symbols and dates may be sent to finance data providers, and market data may be cached locally.
The user-provided stock symbol is used in external market-data requests and in cache filenames. This is expected for the stock-analysis purpose, but it makes ticker validation and scoped caching important.
url = f"https://query1.finance.yahoo.com/v8/finance/chart/{symbol}"
...
cache_file = os.path.join(cache_dir, f"{symbol}-YFin-data-{start_str}-{curr_date}.csv")Use normal stock ticker formats; maintainers should validate or normalize ticker input and ensure cache writes cannot escape the intended cache directory.
The agent could accidentally run a stale or different local copy if paths are not aligned.
The instructions mention multiple possible script locations, which can create ambiguity about which copy is being executed.
脚本位置：`.cursor/skills/stock-analysis/analyze_stock.py`（项目根目录也有一份副本 `analyze_stock.py`）
Verify that OpenClaw invokes the intended reviewed script copy, and prefer a single canonical installed path with documented dependencies.
Project code changes may persist and influence future agent outputs.
The skill can guide changes to TradingAgentsV2 analyst nodes. This is disclosed and user-directed, but those edits can affect later analyses.
当需要新增/修改分析师节点时，参考架构模板。
Review diffs, keep backups, and test TradingAgentsV2 behavior after any analyst-node modifications.