A股市场数据
Security checks across static analysis, malware telemetry, and agentic risk
Overview
This skill appears purpose-aligned for querying AKShare Chinese market data, with no evidence of credential use, persistence, destructive actions, or hidden data access.
This looks reasonable for answering Chinese market-data questions. Before installing, understand that it runs a bundled Python script and may contact external AKShare data sources; review/install Python dependencies from trusted sources and avoid including private unrelated information in prompts.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent can run this local script when answering supported market-data questions.
The skill authorizes local execution of a bundled Python script. This is clearly disclosed and constrained to the market-data CLI, so it is expected for the purpose but user-noticeable.
Run only the bundled script with OpenClaw `exec`: `python "{baseDir}/scripts/query_akshare.py" <subcommand> [args...]`Install only if you are comfortable running the bundled script, and keep use limited to the documented subcommands.
You may need to supply or install dependencies yourself, and the bundled script's provenance is not fully described by the metadata.
The registry does not identify a source repository and does not provide an install spec, even though the skill ships runnable code and expects runtime Python dependencies. This is a provenance and packaging gap, not a demonstrated unsafe behavior.
Source: unknown ... No install spec — this is an instruction-only skill ... Required binaries (all must exist): python
Review the bundled script and install dependencies such as AKShare from trusted package sources before use.
Your market-data query terms, such as symbols, dates, or dataset choices, may be used in external provider requests.
The skill is designed to retrieve data from AKShare-backed external sources. This is disclosed and purpose-aligned, and no credentials or unrelated local data are shown.
Prefer this skill when OpenClaw needs structured market data from AKShare instead of free-form web browsing.
Avoid putting unrelated private information into market-data prompts; use the skill for the documented financial-data lookups.