Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

PyWenCai Stock

v1.0.0

使用 pywencai 库获取同花顺问财股票数据,支持实时行情、财务指标、龙虎榜、资金流向等查询。适用于需要快速获取A股市场数据的场景。

0· 385·3 current·3 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for nnzenw/pywencaistock.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "PyWenCai Stock" (nnzenw/pywencaistock) from ClawHub.
Skill page: https://clawhub.ai/nnzenw/pywencaistock
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Canonical install target

openclaw skills install nnzenw/pywencaistock

ClawHub CLI

Package manager switcher

npx clawhub@latest install pywencaistock
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
The name/description (pywencai access to 同花顺问财) matches the included code and docs. The code imports pywencai/pandas/BeautifulSoup and exposes search/top_gainers/dragon_tiger_list which aligns with advertised features. Minor oddity: scripts/example.py inserts '/tmp/mootdx' on sys.path — likely a convenience for some environments but not required for core functionality.
Instruction Scope
SKILL.md stays within scope: it instructs installing pywencai/pandas and shows how to call skill('pywencai-stock').search. It does include a troubleshooting snippet that disables SSL verification (ssl._create_default_https_context = ssl._create_unverified_context), which is insecure advice — functionally coherent but a security risk if followed. Instructions do not request extraneous files, system credentials, or unexpected external endpoints.
Install Mechanism
No install spec is provided (instruction-only). Recommended installs are standard pip packages (pywencai, pandas). No downloads from untrusted URLs, no extracted archives, and no unusual install locations in the core package files.
Credentials
The skill declares no required environment variables or credentials. SKILL.md notes some queries may need login cookies (a legitimate property of the upstream service) but does not demand unrelated secrets. There is no request for broad or unrelated credentials.
Persistence & Privilege
Skill does not request always:true and is user-invocable only. It contains no code that modifies other skills or global agent configuration. Autonomous invocation remains enabled (platform default) but is not combined with other red flags.
Assessment
This skill appears to do what it says: wrap the third‑party pywencai library to fetch A‑share data. Before installing, consider the following: - Review and trust the upstream pywencai package (pip). It will make network requests to retrieve data; inspect its code or pin a specific version if you need stability/trust. - Do NOT apply the SSL-disable snippet from the troubleshooting section in production; it makes HTTPS connections insecure and can enable man‑in‑the‑middle attacks. - The example script adds '/tmp/mootdx' to sys.path — harmless by itself, but avoid running arbitrary example scripts that modify import paths in sensitive environments. - If you must supply login cookies or any credentials to access additional data, treat them as sensitive: provide them only in secure ways, prefer temporary/session tokens, and avoid embedding them in code. - Run initial tests in an isolated environment (virtualenv/container) to observe network behavior and confirm no unexpected endpoints are contacted. Overall the package is internally consistent with its stated purpose; the main residual risk is trusting the third‑party pywencai package and following the insecure SSL workaround.

Like a lobster shell, security has layers — review code before you run it.

chinavk977e3jk97d30e71neb39epw8x82fx9wdatavk977e3jk97d30e71neb39epw8x82fx9wfinancevk977e3jk97d30e71neb39epw8x82fx9wlatestvk977e3jk97d30e71neb39epw8x82fx9wpywencaivk977e3jk97d30e71neb39epw8x82fx9wstockvk977e3jk97d30e71neb39epw8x82fx9w
385downloads
0stars
1versions
Updated 6h ago
v1.0.0
MIT-0

PyWenCai 股票数据技能

通过 pywencai 库无缝访问同花顺问财的股票数据API。

核心能力

  • ✅ 实时行情查询(涨停、跌停、涨幅榜)
  • ✅ 财务数据(净利润、市盈率、ROE)
  • ✅ 资金流向(主力净流入、龙虎榜)
  • ✅ 个股详细信息
  • ✅ 板块/概念股检索
  • ✅ 返回结构化 pandas DataFrame

安装前置条件

# 1. 安装 pywencai
pip install pywencai

# 2. 如果需要处理大量数据,安装 pandas(通常已自带)
pip install pandas

使用方法

1. 基本搜索

# 查询今日涨停股票
result = skill('pywencai-stock').search(query='A股涨停')
print(result)  # pandas.DataFrame

2. 查询个股

# 查询600519(贵州茅台)的财务指标
result = skill('pywencai-stock').search(
    query='600519 财务指标',
    sort_key='净利润',
    sort_order='desc'
)

3. 获取热门板块

# 查询芯片概念股
result = skill('pywencai-stock').search(
    query='芯片概念股',
    page=1,
    perpage=20
)

4. 资金流向

# 查询主力净流入最多的股票
result = skill('pywencai-stock').search(
    query='主力净流入最多的股票',
    loop=True  # 自动翻页获取全部
)

常用查询示例

目的query 参数
今日涨停'A股涨停'
今日跌停'A股跌停'
涨幅前10'沪深A股涨幅前10'
换手率前10'换手率最高的股票'
龙虎榜'今日龙虎榜'
净利润最高'净利润最高的公司'
市盈率最低'市盈率最低的股票'
ROE最高'ROE最高的股票'
芯片概念'芯片概念股'
新能源车'新能源汽车概念股'

高级参数

result = skill('pywencai-stock').search(
    query='沪深A股',
    page=1,           # 页码(从1开始)
    perpage=50,       # 每页条数(默认50,最大100)
    sort_key='涨跌幅', # 排序字段
    sort_order='desc', # asc/desc
    loop=False        # 是否自动翻页合并结果
)

输出格式

  • 返回 pandas.DataFrame,可直接:
    • result.to_csv('data.csv')
    • result.to_excel('data.xlsx')
    • result.to_json(orient='records')
  • DataFrame 包含所有问财返回的列(具体字段取决于查询内容)

注意事项

  • ⚠️ 请勿高频调用,建议单次查询间隔 >1秒
  • ⚠️ 问财接口可能随时调整,如遇错误请检查 pywencai 版本
  • ⚠️ 某些查询可能需要登录Cookie(本技能使用公开接口,有限制)

故障排除

# 升级到最新版本
pip install -U pywencai

# 如果遇到 SSL 错误,尝试关闭验证(不推荐)
import ssl
ssl._create_default_https_context = ssl._create_unverified_context

参考资源

版本历史

  • v1.0.0 (2025-03-07): 初始发布,封装为基础搜索技能

Comments

Loading comments...