Dongfang Caifu Research Reports

PassAudited by VirusTotal on May 7, 2026.

Overview

Type: OpenClaw Skill Name: eastmoney-reports Version: 1.0.0 The skill bundle provides a toolset for querying and downloading financial research reports from Eastmoney. The documentation (SKILL.md and README.md) describes standard functionality for industry searching, report metadata retrieval, and PDF downloading via an MCP server or CLI. No evidence of malicious intent, data exfiltration, or prompt injection was found in the provided metadata and instructions.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

You would be installing and running external Python code that was not part of this scan.

Why it was flagged

The skill instructs users to obtain and run code from an external GitHub repository, while the reviewed package itself contains no runnable code or lockfile. This is purpose-aligned but leaves code and dependency provenance to the user.

Skill content
git clone https://github.com/manymore13/eastmoney.git
cd eastmoney
pip install -r requirements.txt
Recommendation

Inspect the GitHub repository before installing, use a virtual environment, and prefer pinned/verified dependency versions if available.

What this means

Using bulk download could save a large number of PDFs locally and consume bandwidth or storage.

Why it was flagged

The tool documents a bulk-download mode that can fetch many reports. This is disclosed and fits the tool’s purpose, but it can have practical impact on disk space, bandwidth, and the remote service.

Skill content
# --all = 下载所有能找到的研报(注意:会下载很多!)
Recommendation

Start with small page sizes, set an explicit output directory, and use `--all` only when you intentionally want a large download.