Aastock Daily

A股日报 + 持仓管家，自动推送盘前/收盘/夜间简报，监控持仓股动态及股吧舆情，支持周末资讯。

Security Scan

The skill mostly does what its description says (fetches A‑share data and builds reports), but the shipped scripts read unadvertised local secrets/config paths and an unexpected /tmp snapshot file — an incoherent and potentially sensitive behavior you should review before installing.

Purpose & Capability

The name/description (A股日报 + portfolio tracker) match the code: scripts call EastMoney APIs and assemble morning/close/night/portfolio reports. Network calls to push2.eastmoney.com and mkapi2.dfcfs.com are consistent with the stated purpose. However, the code also includes parsers and utilities (e.g., parsers/parse_v15.py) that read files outside the skill directory (see instruction_scope) and a fallback hard-coded API key — these are not documented in SKILL.md.

Instruction Scope

SKILL.md tells the user to edit config.json and run scripts, which is fine, but the runtime scripts do more than documented: common.sh will attempt to read an EASTMONEY_APIKEY env var and a vault file at ${HOME}/.openclaw/workspace/vault/credentials/eastmoney.json; parsers/parse_v15.py unconditionally opens /tmp/snapshot_current.txt at import time. Those file reads are not mentioned in SKILL.md and broaden the skill's scope to access local files and agent vault contents.

Install Mechanism

There is no install procedure or remote download: the skill is instruction-plus-script only, so nothing is fetched from arbitrary URLs at install time. This lowers install-time risk.

Credentials

Registry metadata declares no required env vars, but the code expects EASTMONEY_APIKEY and also probes a local vault file for EastMoney keys. Reading ~/.openclaw/.../eastmoney.json (agent vault) is disproportionate if not documented. The code also includes a hard-coded fallback API key, which means it can call external services even without user-provided credentials.

Persistence & Privilege

The skill does not request always:true and does not modify other skills or system-wide settings. It writes logs under its skill directory (logs/), which is expected behavior for a local script.

What to consider before installing

This skill generally does what it claims (fetch market/news data and format reports), but review before installing: - Be aware the scripts will try to read an EASTMONEY_APIKEY environment variable and will also look for ${HOME}/.openclaw/workspace/vault/credentials/eastmoney.json. If you store secrets in that vault, the skill will access them; the skill's metadata does not declare this. Consider creating a dedicated, limited EastMoney API key if you allow that, or remove the vault-read lines. - parsers/parse_v15.py opens /tmp/snapshot_current.txt at import time. If you run code that imports that parser, it will read that file — ensure that file does not contain sensitive data or remove/modify the parser if unnecessary. - The code includes a hard-coded fallback API key; the skill can call external APIs even if you don't set credentials. If you want to avoid remote calls, run the scripts offline or inspect/comment out network calls. - Prefer running the skill in a sandboxed environment (VM/container) and inspect/modify common.sh to remove unintended file reads (vault path, fallback API key) before use. If you do not want the skill accessing your agent vault or /tmp, do not install or run it until those lines are removed or clarified by the author.

A股日报 + 持仓管家 (aastock-daily)

基于东方财富 API 的 A 股市场资讯推送系统，支持每日定时推送、持仓股票追踪及股吧舆情监控。

功能特性

功能	说明	推送时间
📰 盘前快讯	隔夜美股、期货、黄金原油、重要新闻	09:15 (周一至周五)
💼 持仓追踪(早)	持仓股行情+公告+股吧舆情	09:30 (周一至周五)
📈 收盘简报	指数涨跌、板块资金、涨停统计	15:00 (周一至周五)
💼 持仓追踪(晚)	持仓股动态+晚间公告+股吧舆情	18:00 (周一至周五)
🌙 夜间复盘	龙虎榜、游资动向、外盘夜盘	20:00 (周一至周五)
📺 周末资讯	市场回顾、周报分析、持仓股公告	10:00 / 15:00 (周六周日)

持仓追踪内容

每只持仓股包含：

• 📊 实时行情 - 当前价格、涨跌幅、主力资金流向
• 📢 最新公告 - 最新发布的公告或研报标题
• 💬 股吧舆情 - 散户讨论、投资者问答、社区热点

目录结构

aastock-daily/
├── SKILL.md              # 本文档
├── config.json            # 用户配置（持仓列表、开关等）
├── config-schema.json     # 配置 JSON Schema
├── scripts/
│   ├── common.sh         # 公共函数库（API、日志、东方财富行情）
│   ├── morning.sh        # 盘前快讯
│   ├── close.sh          # 收盘简报
│   ├── night.sh          # 夜间复盘
│   ├── portfolio.sh      # 持仓追踪（含股吧舆情）
│   └── weekend.sh        # 周末资讯
└── logs/                  # 日志目录

快速开始

1. 配置持仓股票

编辑 config.json 中的 portfolio 列表：

{
  "portfolio": [
    {"name": "中国建筑", "code": "601668"},
    {"name": "中国广核", "code": "003816"},
    {"name": "中国电信", "code": "601728"}
  ]
}

2. 手动执行脚本

# 持仓追踪（含股吧）
bash scripts/portfolio.sh

# 指定早间/晚间
bash scripts/portfolio.sh 早间
bash scripts/portfolio.sh 晚间

# 周末资讯
bash scripts/weekend.sh

配置说明

config.json 完整配置

{
  "version": "1.1.0",
  "portfolio": [
    {"name": "股票名称", "code": "股票代码"}
  ],
  "push_schedule": {
    "morning": {"enabled": true, "time": "09:15"},
    "close": {"enabled": true, "time": "15:00"},
    "night": {"enabled": true, "time": "20:00"}
  },
  "portfolio_tracking": {
    "enabled": true,
    "times": ["09:30", "18:00"]
  },
  "weekend": {
    "enabled": true,
    "times": ["10:00", "15:00"]
  }
}

API 调用说明

数据来源

数据类型	API 来源
指数/个股行情	push2.eastmoney.com (免费实时)
涨停/资金流向	push2.eastmoney.com (免费实时)
新闻/公告/研报	mkapi2.dfcfs.com (认证API)
股吧舆情	mkapi2.dfcfs.com (认证API)

API 消耗估算

脚本	API 调用次数
morning.sh	6 次
close.sh	8 次
night.sh	6 次
portfolio.sh	21-27 次（含9只股吧）
weekend.sh	10 次
工作日总计	~92 次
周末总计	~10 次

更新日志

v1.1.0 (2026-03-28)

• ✅ 新增：持仓股吧舆情功能
• 追踪散户讨论、投资者问答、社区热点

v1.0.0 (2026-03-28)

• 初始版本
• 支持盘前/收盘/夜间/持仓追踪/周末资讯