股票打板筛选
PassAudited by ClawScan on May 1, 2026.
Overview
This stock-screening skill appears purpose-aligned and low risk, with minor notes about using an external market-data API and a mismatch between the documented and actual data provider.
This skill looks safe for its stated purpose of fetching and displaying stock-screening results. Before installing, note that it uses an external Eastmoney API despite documenting Sina Finance, and it requires a Node-based CLI even though the registry metadata does not declare required binaries.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Users may believe the market data comes from Sina Finance when the implementation actually queries Eastmoney.
The documentation says the data source is Sina Finance, while bin/board.js uses https://push2.eastmoney.com API URLs. This provider mismatch could affect user expectations, although the behavior is still aligned with stock data retrieval.
使用新浪财经实时行情接口
Update the documentation to accurately name the data provider or explain all providers used.
Installation or use may require Node even though the registry metadata does not make that clear.
The package exposes a Node CLI binary, while the registry metadata says there are no required binaries and no install spec. This appears to be an under-declared runtime requirement, not hidden or unsafe code.
"bins": [{ "name": "board", "path": "bin/board.js" }], "requires": { "node": ">=14" }Declare the Node runtime requirement and CLI installation behavior in the metadata or install instructions.
Using the skill contacts an external financial-data service to fetch stock information.
The skill performs outbound HTTPS requests to retrieve market data. This network use is expected for its real-time stock-screening purpose and does not include credentials or local user data.
https.get(url, { headers: { 'Referer': 'https://finance.eastmoney.com', 'User-Agent': 'Mozilla/5.0 ...' } }Use only if you are comfortable with the skill querying the external market-data provider during use.