A Share Daily Report

PassAudited by ClawScan on May 10, 2026.

Overview

The skill is coherent for generating A-share market reports, but it uses external financial-data services, optional Feishu publishing, and mock-data fallbacks that users should verify.

Install/use this skill only if you are comfortable with it contacting financial-data/news APIs, reading your configured watchlist and optional .env credentials, saving reports locally, and optionally publishing reports to Feishu. Verify dependencies and data-source status before relying on the generated financial analysis.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If configured, the skill can use your data-provider credentials and Feishu identity settings.

Why it was flagged

The skill may use provider API keys and a Feishu recipient identifier for market data and publishing. This is disclosed and purpose-aligned, but it is credential/account access users should manage carefully.

Skill content
MX_APIKEY=mkt_xxxxxxxx ... TUSHARE_TOKEN=xxxxxxxx ... FEISHU_NOTIFY_OPEN_ID=ou_xxxx
Recommendation

Use limited-scope tokens where possible, keep the .env file private, and only configure credentials needed for the features you use.

What this means

Using --publish can move report content from the local environment into a Feishu cloud document/message.

Why it was flagged

Publishing sends the generated report to Feishu and may notify a user/chat. This is optional and disclosed, but report content may include a user watchlist or investment notes.

Skill content
--publish  # 启用发布到飞书 ... 自动创建飞书云文档 ... 发送消息通知(含文档链接)
Recommendation

Use --publish only when you intend to share the report, and verify the Feishu folder and recipient settings first.

What this means

Successful operation may depend on other local skills and packages being present and trustworthy.

Why it was flagged

The skill depends on other installed skills and external APIs, while registry metadata lists no install spec or capability tags. This is a dependency/provenance gap, though the dependencies are disclosed and aligned with market-data reporting.

Skill content
已安装并复用的技能 ... akshare-cn-market ... tushare-skills ... mx-data ... mx-search ... 直接 import 使用 Python 接口
Recommendation

Verify the installed peer skills and Python packages before use, especially if running in a sensitive workspace.

What this means

A report could contain simulated or fallback data while still presenting trading-style conclusions.

Why it was flagged

The skill can produce investment-oriented analysis and may fall back to mock data if sources fail. This is disclosed, but users could over-trust a report if mock or stale data is not clearly noticed.

Skill content
智能分析引擎 - 30 秒总览、自选股预测、交易策略、凯利公式仓位、新闻分级 ... 所有源失败时使用 Mock 数据生成报告
Recommendation

Check data source/cached/mock indicators in the output and do not make trading decisions without independently verifying the data.