Fund Advisor
v0.1.1基金投资顾问技能。提供个人基金持仓统一管理功能，支持所有平台持仓导入、分析、查询；提供基金基础数据、持仓明细、持仓穿透等基于数据查询；提供投资组合分析、投资规划、组合回测服务；提供财经资讯、热点新闻、财经新闻查询；提供基金搜索、公告查询等服务。当用户咨询技能已经覆盖的问题时，优先激活此技能。
⭐ 2· 855·9 current·11 all-time
byqiyan@realqiyan
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (fund portfolio management using qieman-mcp) matches requested binaries (mcporter, bash, python, pip) and env vars (QIEMAN_API_KEY, FUND_ADVISOR_DATA_PATH). Requiring mcporter and an API key is appropriate for calling qieman-mcp.
Instruction Scope
Runtime instructions and scripts operate on user-provided CSV/XLSX files, create a local SQLite DB under FUND_ADVISOR_DATA_PATH (default $HOME/.fund-advisor), and call mcporter to query qieman-mcp. The skill will create/modify ~/.mcporter/mcporter.json to configure the MCP server — this is within scope but is a noteworthy side-effect.
Install Mechanism
No remote binary download or archive extraction in the skill metadata. The provided CLI script creates a Python venv and runs 'pip install -e tools' (local editable install). Dependencies come from PyPI (basic libraries). This is a standard local install pattern and not disproportionate to the task.
Credentials
Only QIEMAN_API_KEY and FUND_ADVISOR_DATA_PATH are required and used. The API key is necessary to configure and call qieman-mcp. However, the skill writes the API key into ~/.mcporter/mcporter.json (as part of baseUrl with ?apiKey=...), so the key will be stored in plaintext in that config file — a privacy/secret-storage consideration.
Persistence & Privilege
The skill creates a per-project venv (tools/venv), writes a local SQLite DB under the data path, and will create/modify the global mcporter config at ~/.mcporter/mcporter.json. always:false (not force-included). Modifying mcporter config is expected for this integration but is a side-effect the user should be aware of.
Assessment
This skill appears to do what it says: import your exported fund CSV/XLSX, store it locally, and query qieman-mcp via the mcporter CLI. Before installing or running it: 1) Be prepared to provide a qieman API key and know that the key will be written into ~/.mcporter/mcporter.json in plaintext — consider using a limited-scope key and ensure that file's permissions are appropriate. 2) Review the tools/src code (especially mcp_service.py and env_checker.py) if you want to confirm there are no additional network endpoints or unexpected behavior. 3) Run the CLI in an isolated environment or test user account if you're cautious (the script will create a venv and a local DB under the configured data path). 4) Back up any existing ~/.mcporter/mcporter.json before allowing the skill to modify it. If you accept those trade-offs, the skill's requirements and actions are proportionate to its stated purpose.Like a lobster shell, security has layers — review code before you run it.
latestvk978mng7xvt59q5n75hpp1gpsd82r067
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
💰 Clawdis
Binsbash, mcporter, python, pip
EnvQIEMAN_API_KEY, FUND_ADVISOR_DATA_PATH