InvestLog AI
v1.0.2美股实时数据研究工具：股价行情、估值分析、财报数据、分析师评级、目标价、内部人交易、国会议员交易、机构持仓、ETF持仓、技术指标、分红拆股、财务健康评分。Real-time US stock research: quotes, valuation, financials, analyst ratings, ins...
⭐ 0· 99·0 current·0 all-time
by@nblicb
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (US stock research) align with the runtime instructions: all examples call https://api.investlog.ai and request market/financial data. No unrelated binaries, env vars, or config paths are requested.
Instruction Scope
SKILL.md instructs only to build URL-encoded queries and call the InvestLog API via web_fetch, then extract the results array and reply in the user's language. It does not instruct reading local files, accessing unrelated environment variables, or contacting other endpoints.
Install Mechanism
No install spec or code files are present (instruction-only). There is no download/extract activity or third-party package installation described.
Credentials
The skill requires no environment variables or credentials for the free tier; an API key is optional after the free quota—this matches the stated API usage model and is proportionate to the skill's purpose.
Persistence & Privilege
Skill is not always-enabled and does not request persistent system privileges or modify other skills. Autonomous invocation is allowed by platform default but the skill itself does not escalate privileges.
Assessment
This skill is instruction-only and simply calls a third-party HTTPS API (api.investlog.ai). Before installing, consider: (1) queries and any user-supplied symbols or company names will be sent to that external service — if you need privacy for portfolio or trade plans, avoid sending sensitive data; (2) after the free quota you must register and supply an api_key in query parameters if you want more requests — treat that key like a secret; (3) verify the API domain and its privacy/terms (make sure it is the legitimate investlog.ai) and that TLS/HTTPS is used; (4) check rate/usage limits so the agent won't unexpectedly exhaust your quota. No other environment access or installs are requested. If you need higher assurance, ask the publisher for their privacy policy or a signed provenance of the skill.Like a lobster shell, security has layers — review code before you run it.
latestvk976kmr4965gh68an72ttzxf2d83d28b
License
MIT-0
Free to use, modify, and redistribute. No attribution required.