Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

A Stock Research

v1.0.0

Comprehensive A-share (A 股) information gathering and analysis skills for Chinese stock market. Use when you need to query stock prices, analyze financial da...

0· 109·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for gk-lucky/a-stock-research.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "A Stock Research" (gk-lucky/a-stock-research) from ClawHub.
Skill page: https://clawhub.ai/gk-lucky/a-stock-research
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install a-stock-research

ClawHub CLI

Package manager switcher

npx clawhub@latest install a-stock-research
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The skill's stated purpose (A-share research) aligns with the commands and listed 'installed' sub-skills (akshare-stock, china-stock-analysis, stock-watcher, stock-analysis). However, the SKILL.md repeatedly instructs the agent to run 'npx <package>' commands but the skill metadata declares no required binaries or install spec. If the agent is expected to run npx, that should be declared. The absence of declared required binaries (npx/node) is an incoherence.
!
Instruction Scope
Instructions are narrowly about querying and analyzing market data and managing watchlists, which fits the purpose. But they direct the agent to execute third-party npm packages at runtime (npx), which gives those packages freedom to run arbitrary code, access the filesystem, and contact external endpoints. The SKILL.md does not constrain or document where those packages come from or what network endpoints they use, so the agent could end up executing unexpected code.
!
Install Mechanism
There is no install specification in the skill bundle, yet the runtime examples use 'npx' to fetch and run packages. Relying on npx means fetching code from the npm registry (or a registry proxy) at runtime and executing it with the agent's privileges; this is a moderate-to-high risk unless the packages are audited and pinned. The skill does not declare or pin package sources, checksums, or versions, nor does it instruct to verify package provenance.
Credentials
The skill declares no required environment variables, credentials, or config paths and SKILL.md does not request any secrets. That is proportionate for a public-data research skill. (Note: dynamically-run npm packages could themselves request or use env vars when executed, which is not declared here.)
Persistence & Privilege
always:false and no install or code files means the skill does not request permanent elevated presence or modification of other skills. The skill lists a workspace path in documentation, but there is no declared behavior that writes or alters global settings.
What to consider before installing
This skill appears to be a coherent A-share research helper, but it relies on running npm packages at runtime via 'npx' while declaring no install requirements. Before installing or running: 1) confirm whether your agent environment has node/npx and whether you are comfortable with npx fetching and executing code from npm; 2) verify the exact npm packages/versions the skill will run (pin versions), inspect their source code or README, and ensure they come from trusted publishers; 3) run them in a sandboxed environment first (no access to sensitive files or credentials); 4) if you cannot audit the packages, avoid executing npx commands with elevated privileges or in an environment containing secrets. If the maintainer can provide a concrete install spec (pinned packages, checksums, or a vetted bundle), the risk would be lower.

Like a lobster shell, security has layers — review code before you run it.

latestvk977xnh9tq44hf10vj0assza5s83zf37
109downloads
0stars
1versions
Updated 3w ago
v1.0.0
MIT-0

📈 A 股信息搜集与分析报告

已安装的技能套件

1️⃣ akshare-stock - A 股量化数据分析 ⭐⭐⭐⭐⭐

  • 评分: 1.086 (新安装)
  • 数据源: AkShare(免费开源)
  • 功能: A 股行情、财务数据、板块信息
  • 作者: mbpz

2️⃣ china-stock-analysis - 中国股票分析 ⭐⭐⭐⭐

  • 评分: 3.590 (新安装)
  • 功能: A 股/港股价格分析、投资建议
  • 数据源: 中国金融市场数据
  • 作者: paulshe

3️⃣ stock-watcher - 自选股监控 ⭐⭐⭐⭐

  • 评分: 3.649 (新安装)
  • 功能: 自选股管理、性能总结
  • 数据源: 10jqka.com.cn(东方财富网)
  • 作者: Robin797860

4️⃣ stock-analysis - 股票综合分析 ⭐⭐⭐⭐

  • 评分: 3.699
  • 功能: Yahoo Finance 数据分析、投资组合管理
  • 数据源: Yahoo Finance, Hot Scanner
  • 作者: udiedrichsen

🚀 核心功能

AkShare - A 股量化分析

# 获取股票实时行情
akshare stock_zh_a_spot_em()

# 获取财务数据
akshare stock_financial_analysis_indicator(stock="000001")

# 获取板块信息
akshare sector_info_category()

China Stock Analysis - 中国股票分析

  • ✅ A 股价格查询
  • ✅ 港股数据分析
  • ✅ 投资建议生成
  • ✅ 市场趋势预测

Stock Watcher - 自选股监控

  • ✅ 添加/删除自选股
  • ✅ 查看自选股列表
  • ✅ 获取性能总结
  • ✅ 实时监控预警

💡 使用场景

1. 查询股票实时行情

# 使用 akshare-stock
npx akshare-stock get_price stock_code="600519"

# 或者使用 china-stock-analysis
npx china-stock-analysis query "贵州茅台"

2. 分析财务数据

# 获取财务指标
npx akshare-stock get_financials stock_code="000001"

# 分析盈利能力
npx china-stock-analysis financial_analysis "600519"

3. 监控自选股

# 添加自选股
npx stock-watcher add 600519 000001

# 查看自选股列表
npx stock-watcher list

# 获取性能总结
npx stock-watcher summary

4. 投资组合管理

# 使用 stock-analysis
npx stock-analysis portfolio add "贵州茅台"
npx stock-analysis portfolio performance

📊 数据源说明

技能主要数据源特点
akshare-stockAkShare (开源)免费、全量 A 股数据
china-stock-analysis中国金融市场专注 A 股/港股
stock-watcher10jqka.com.cn东方财富网,实时性强
stock-analysisYahoo Finance全球市场覆盖

🎯 推荐工作流

日常监控流程

# 1. 查看自选股表现
npx stock-watcher summary

# 2. 查询热门板块
npx akshare-stock get_sector_info

# 3. 分析重点股票
npx china-stock-analysis analyze "600519"

# 4. 生成投资组合报告
npx stock-analysis portfolio report

深度研究流程

# 1. 获取财务数据
npx akshare-stock get_financials stock_code="000001"

# 2. 分析技术指标
npx china-stock-analysis technical_analysis "600519"

# 3. 查看市场情绪
npx stock-analysis sentiment "贵州茅台"

# 4. 生成综合报告
npx china-stock-analysis full_report "600519"

📝 常用命令速查

命令说明示例
npx akshare-stock get_price获取价格数据stock_code="600519"
npx china-stock-analysis query查询股票信息"贵州茅台"
npx stock-watcher add添加自选股600519 000001
npx stock-watcher list查看自选股列表-
npx stock-watcher summary获取性能总结-
npx stock-analysis portfolio投资组合管理add/remove/performance

⚠️ 注意事项

数据更新频率

  • AkShare: 实时/分钟级更新
  • 10jqka: 实时行情,T+1 交易数据
  • Yahoo Finance: 可能有延迟

使用建议

  • ✅ 适合短线:stock-watcher + akshare-stock
  • ✅ 适合长线:china-stock-analysis + stock-analysis
  • ⚠️ 投资有风险,分析仅供参考

🎓 学习路径

初级用户

  1. 先学 stock-watcher - 管理自选股
  2. 使用 china-stock-analysis query - 查询基本信息

中级用户

  1. 学习 akshare-stock - 获取详细财务数据
  2. 使用 stock-analysis portfolio - 投资组合管理

高级用户

  1. 结合所有技能进行深度分析
  2. 自定义数据源和分析策略
  3. 建立自己的投资模型

📂 文件位置

/home/anubis/.openclaw/workspace/skills/
├── akshare-stock/        # A 股量化数据分析
├── china-stock-analysis/ # 中国股票分析
├── stock-watcher/        # 自选股监控
└── stock-analysis/       # 股票综合分析(已存在)

投资有风险,入市需谨慎! 📈

Comments

Loading comments...