Eastmoney Stock.Bak2

ReviewAudited by ClawScan on May 10, 2026.

Overview

The skill mainly fetches public stock data, but some included scripts present hardcoded, dated stock-picking and portfolio-allocation advice as if it were current market analysis.

Install only if you want a public stock-data helper and are comfortable verifying results yourself. Be especially cautious with scripts that output stock picks, stop-losses, and portfolio allocations, because some of that content appears hardcoded or dated rather than freshly fetched from the advertised API.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A user could mistake static or stale stock-picking guidance for current, data-backed analysis and make financial decisions based on it.

Why it was flagged

A script bundled with a stock-data lookup skill prints dated, hardcoded market analysis and specific portfolio-allocation suggestions, which is broader and more trust-sensitive than the disclosed data-query purpose.

Skill content
print("数据时间:2026 年 3 月 17 日") ... print("🎯 【100 万资金配置建议】") ... print("  300750 宁德时代   新能源    20 万     20%     -8%")
Recommendation

Treat outputs as informational only, verify prices and rankings with a trusted live market-data source, and do not rely on the bundled allocation suggestions as investment advice.

What this means

Market data could be unavailable or altered in transit, which may affect answers about rankings or prices.

Why it was flagged

The script fetches public market data from an external API, which is expected for this skill, but the use of plain HTTP means data integrity depends on the network path.

Skill content
url = "http://push2.eastmoney.com/api/qt/clist/get"
Recommendation

Cross-check important stock information with an official or HTTPS-protected market-data source before acting on it.

What this means

The skill may fail or require manual setup if Python or the requests library is not already installed.

Why it was flagged

The package exposes a Python script entry but declares no dependencies, while the Python files import requests; this is an incomplete runtime/dependency contract.

Skill content
"scripts": { "stock.py": "python3 scripts/stock.py" }, "install": { "dependencies": [] }
Recommendation

Confirm the runtime requirements before use and prefer a version that clearly declares Python and requests dependencies.