Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

7d Stock Analyzer

v1.0.2

七维分析框架 - 深度股票分析 Agent,整合多数据源进行全方位股票分析

0· 140·1 current·1 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for xuanpass/7d-stock-analyzer.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "7d Stock Analyzer" (xuanpass/7d-stock-analyzer) from ClawHub.
Skill page: https://clawhub.ai/xuanpass/7d-stock-analyzer
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Required env vars: QVERIS_API_KEY
Required binaries: python3
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install 7d-stock-analyzer

ClawHub CLI

Package manager switcher

npx clawhub@latest install 7d-stock-analyzer
Security Scan
Capability signals
Requires sensitive credentials
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description match the included Python code: adapters for efinance/akshare/qveris and multiple analyzers are present and consistent with a stock analysis tool. However, the registry and SKILL.md declare QVERIS_API_KEY as a required environment variable even though the code treats the QVeris adapter as optional (it simply marks itself unavailable when the key is missing) and most functionality defaults to efinance/akshare. This is a proportionality/expectation mismatch.
Instruction Scope
Runtime instructions are limited to running the provided Python script and using the declared data sources. The code uses only the declared libraries and the single environment variable QVERIS_API_KEY. There are no instructions to read unrelated system files, access other credentials, or transmit data to hidden endpoints. The QVeris adapter currently contains TODOs and prints placeholder messages rather than performing external calls.
Install Mechanism
There is no formal install spec in the registry, but SKILL.md includes metadata recommending pip install efinance akshare pandas numpy. Those are public PyPI packages (normal for a Python tool). Because dependency installation is documented only in SKILL.md and not enforced by a platform install step, a user must run pip manually. This is not inherently malicious but is a user-experience and provenance note to verify packages before installing.
!
Credentials
Only one env var is requested: QVERIS_API_KEY. Marking it as required is disproportionate because: (1) the default data sources are efinance and akshare and the tool works without QVeris; (2) the QVeris adapter is effectively unimplemented (TODOs) and will set itself unavailable if the key is missing. Declaring the key as mandatory could mislead users into providing a secret they don't need.
Persistence & Privilege
The skill does not request always:true, does not modify other skills or system-wide agent settings, and has no install script that writes unexpected files. It is a standard, non-persistent Python tool.
What to consider before installing
This package appears to be a legitimate stock analysis tool, but there are a few things to check before installing or providing secrets: 1) QVERIS_API_KEY is marked required in metadata/SKILL.md but the code treats QVeris as optional and its adapter contains TODO placeholders — don't provide that API key unless you know you need QVeris and trust its service. 2) Dependencies are normal PyPI packages (efinance, akshare, pandas, numpy), but SKILL.md recommends installing them manually; review and install into an isolated virtual environment to avoid supply-chain issues. 3) The tool will call network APIs via efinance/akshare (expected for this purpose); if you need to protect data, run it in a network-restricted environment or inspect the libraries' behaviors. 4) If you require full assurance, ask the author for a clearer install spec and clarification on QVeris behavior (or wait until the QVeris adapter is implemented) — current metadata vs. code creates ambiguity. Overall: usable but review the QVeris requirement and install dependencies in an isolated environment.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

📊 Clawdis
Binspython3
EnvQVERIS_API_KEY
latestvk97e59xgb8ydcb5h59978sh34s853aj3
140downloads
0stars
3versions
Updated 1w ago
v1.0.2
MIT-0

七维分析框架深度股票分析 Agent

基于七维分析框架的深度股票分析系统,整合 efinance、akshare、qveris 多数据源,提供全方位的股票投资分析。

核心能力

七维分析框架:

  1. 数据收集与验证
  2. 基本面分析(盈利能力、资产负债、现金流)
  3. 估值分析(相对估值、估值风险)
  4. 行业与竞争分析(生命周期、竞争格局、护城河)
  5. 技术面分析(趋势、支撑压力、资金流向)
  6. 风险识别(财务风险、行业风险、估值风险)
  7. 结论输出(评分卡、投资建议矩阵)

快速开始

基础使用

python scripts/analyze.py 600519

完整分析(所有维度)

python scripts/analyze.py 600519 --full

指定维度分析

# 只分析基本面
python scripts/analyze.py 600519 --dimensions fundamental

# 分析多个维度
python scripts/analyze.py 600519 --dimensions fundamental,valuation,technical

指定数据源

# 仅使用 efinance
python scripts/analyze.py 600519 --sources efinance

# 使用多数据源交叉验证
python scripts/analyze.py 600519 --sources efinance,akshare,qveris

可用维度

维度标识维度名称说明
data数据收集与验证获取并验证核心数据
fundamental基本面分析盈利能力、资产负债、现金流
valuation估值分析相对估值、估值风险
industry行业与竞争分析行业周期、竞争格局、护城河
technical技术面分析趋势、支撑压力、资金流向
risk风险识别财务风险、行业风险、估值风险
conclusion结论输出评分卡、投资建议矩阵

输出格式

  • Markdown:详细的分析报告,包含表格和评分
  • JSON:结构化数据,便于程序化处理
  • 简报:简要摘要,适合快速浏览
# 输出 JSON
python scripts/analyze.py 600519 --output json

# 输出简报
python scripts/analyze.py 600519 --output brief

评分系统

综合评分(0-100分):

分数区间评级含义建议
85-100⭐⭐⭐⭐⭐强烈推荐重仓买入,长期持有
70-84⭐⭐⭐⭐推荐适量买入,中期持有
55-69⭐⭐⭐中性观望,等待更好买点
40-54⭐⭐谨慎减仓,或短线博弈
<40回避远离,或做空

数据源说明

数据源主要功能优势成本
efinance实时行情、基础数据免费、开源、A股全面
akshare深度财务数据数据全面、更新及时
qveris动态API调用可扩展、多源验证

技术特性

  • 并行分析:多个维度并行执行,提高效率
  • 数据缓存:复用数据接口,降低成本
  • 交叉验证:多数据源验证,提高准确性
  • 模块化设计:每个维度独立,易于扩展

使用场景

  1. 个股深度分析:全面了解一只股票的投资价值
  2. 投资决策支持:为买入/卖出/持有提供数据支撑
  3. 投资组合管理:定期分析持仓股票
  4. 股票筛选:快速排除不符合要求的股票

依赖项

pip install efinance akshare pandas numpy

环境变量

export QVERIS_API_KEY=your_qveris_api_key

注意事项

  • ⚠️ 本系统仅供参考,不构成投资建议
  • ⚠️ 投资有风险,入市需谨慎
  • ⚠️ 请结合市场情况和自身判断做出决策
  • ⚠️ 数据可能存在延迟,请以实时数据为准

Comments

Loading comments...