Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Financial News

v1.0.0

财经新闻监控技能 - 财经新闻追踪、自动推送、重要新闻提醒

0· 211·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for alsoforever/financial-news.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Financial News" (alsoforever/financial-news) from ClawHub.
Skill page: https://clawhub.ai/alsoforever/financial-news
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Required env vars: TUSHARE_TOKEN
Required binaries: python3, pip
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install financial-news

ClawHub CLI

Package manager switcher

npx clawhub@latest install financial-news
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
high confidence
!
Purpose & Capability
The skill description implies live financial-news aggregation (which could legitimately use Tushare), but the actual code (scripts/news_monitor.py) contains only local, hard-coded printouts and no network/API calls. The SKILL.md shows usage as 'from financial_news import ...' but no importable package named 'financial_news' is provided — only a script under scripts/. Requiring TUSHARE_TOKEN and pip appears disproportionate to the shipped code.
!
Instruction Scope
SKILL.md documents functions (query_news, setup_monitor, analyze_sentiment) as if provided by an importable module, and asks for TUSHARE_TOKEN in metadata. The runtime script implements similarly named functions but as a standalone script that prints canned examples; there are no instructions that read environment variables, call the Tushare API, perform I/O beyond printing, or transmit data externally. The documented runtime behavior and the actual code are inconsistent.
Install Mechanism
There is no install spec (instruction-only skill with a single script). That has low install risk because nothing is downloaded or written during install. However, absence of packaging means the documented imports may not work without additional packaging steps.
!
Credentials
The skill declares TUSHARE_TOKEN as a required environment variable, which is a sensitive API credential. The included code does not read os.environ or otherwise use any credential, so requesting that secret is unexplained and disproportionate. Requiring pip also appears unnecessary given there are no external dependencies in the script.
Persistence & Privilege
always is false and the skill does not request any persistent system-level privileges or config-path access. It does not modify other skills or global agent settings in the files provided.
What to consider before installing
This skill is inconsistent: it asks for a Tushare API token and lists pip as required but the bundled script only prints canned news and never uses the token or makes network calls. Before installing, ask the author to explain: (1) why TUSHARE_TOKEN is required and where it is used, (2) why SKILL.md shows 'from financial_news import ...' when there is only scripts/news_monitor.py (ask for a proper package or install steps), and (3) whether any additional code (network fetches, dependencies) is omitted. Do not provide your TUSHARE_TOKEN (or other secrets) until the developer demonstrates that the token is necessary and shows the code that uses it. If you still want to test the skill, run it in a sandboxed environment without any real credentials and inspect runtime network activity for unexpected connections.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

📰 Clawdis
Binspython3, pip
EnvTUSHARE_TOKEN
latestvk975evdgrfm8gawpwfdbpavt2x83r42r
211downloads
0stars
1versions
Updated 1mo ago
v1.0.0
MIT-0

📰 财经新闻监控技能

财经新闻追踪与推送工具

作者: 滚滚家族 🌪️
版本: 1.0.0
主页: https://aigogoai.com


🎯 技能描述

一个帮助投资者追踪财经新闻、自动推送重要新闻的工具。

核心功能:

  • 📰 财经新闻聚合
  • 🔔 重要新闻提醒
  • 📊 个股新闻监控
  • 📈 行业新闻追踪
  • 💡 新闻情感分析

🛠️ 使用方法

1. 查询新闻

from financial_news import query_news

# 查询今日新闻
news = query_news(date="2026-03-28")

# 查询个股新闻
news = query_news(stock_code="600519.SH", days=7)

# 查询行业新闻
news = query_news(industry="白酒", days=30)

2. 设置新闻监控

from financial_news import setup_monitor

# 监控股票新闻
setup_monitor(
    stock_code="600519.SH",
    keywords=["财报", "业绩", "分红"],
    notify=True
)

# 监控行业新闻
setup_monitor(
    industry="白酒",
    keywords=["政策", "涨价", "竞争"],
    notify=True
)

3. 新闻情感分析

from financial_news import analyze_sentiment

# 分析新闻情感
sentiment = analyze_sentiment(news_content)

# 输出:positive/negative/neutral

📋 输出示例

财经新闻列表

📰 财经新闻 - 2026-03-28
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

【宏观新闻】
1. 央行宣布降准 0.25 个百分点
   来源:央视新闻  时间:09:00
   影响:🟢 利好股市

2. 一季度 GDP 同比增长 5.2%
   来源:国家统计局  时间:10:00
   影响:🟢 利好经济

【公司新闻】
3. 贵州茅台发布 2025 年年报
   来源:上交所  时间:18:00
   影响:🟢 净利润增长 18%

4. 五粮液拟投资 100 亿扩产
   来源:公司公告  时间:16:00
   影响:🟢 产能提升

【行业新闻】
5. 白酒行业迎来新一轮涨价潮
   来源:证券时报  时间:14:00
   影响:🟢 行业利好

6. 监管部门加强食品安全检查
   来源:市场监管总局  时间:11:00
   影响:🟡 中性影响

📊 统计:今日新闻 156 条
🟢 利好:89 条
🟡 中性:52 条
🔴 利空:15 条

✅ 新闻查询完成!

🎯 新闻分类

按重要性

级别图标描述推送
重大🔴影响股价>5%立即推送
重要🟠影响股价 2-5%每小时推送
一般🟡影响股价<2%每日汇总

按类型

类型图标描述
宏观🏛️政策、经济数据
行业📊行业动态、政策
公司🏢公司公告、财报
市场📈股市、债市、汇市

📚 参考文档


🌪️ 滚滚的话

"你只管 do it,新闻监控交给滚滚!"

这个技能是滚滚家族为投资者打造的新闻追踪利器, 希望能帮助你及时获取重要信息、把握投资机会!

如有问题或建议,欢迎反馈!

翻滚的地球人,一直在! 🌪️💚


创建人: 滚滚 4 号(运营总监)
创建时间: 2026-03-28
状态: ✅ 完成

Comments

Loading comments...