Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

港股美股分析

智能股票分析系统 v2.1 - 港股/美股/A股实时行情 + 富途数据源 + 技术指标 + 综合报告(7大板块)

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 32 · 0 current installs · 0 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
high confidence
Purpose & Capability
Name/description match the code: files implement fetching from Tencent (qt.gtimg.cn), Finnhub, and show futu URLs; technical indicator and news modules are present. However the skill includes an embedded Finnhub API key string in many files instead of declaring an environment variable in metadata, which is inconsistent with expected credential handling.
Instruction Scope
SKILL.md and code instruct only to fetch market data, compute indicators, and summarize news. There are no instructions to read arbitrary local files or to exfiltrate system config. The runtime scripts contact multiple external services (qt.gtimg.cn, finnhub.io, ai.6551.io, futunn.com and optional longbridgeapi), which is consistent with a data‑fetching analyzer but expands the network surface.
Install Mechanism
No install spec (instruction-only skill) — the repo contains Python scripts that run with standard dependencies (requests). No remote downloads or archive extraction are present in the manifest. Installation risk is low provided you run code locally and review it first.
!
Credentials
Metadata declares no required env vars but code uses/accepts credentials: FINNHUB_API_KEY via env is referenced in stock_analyst.py yet multiple files embed a hardcoded token string ('d6nucg1r01qse5q...') directly in source (analyze_stock.py, company_info.py, jd_logistics.py, report_v2.py, test_stock.py, etc.). test_longbridge.py expects LONGBRIDGE_ACCESS_TOKEN in env but this is not documented in metadata. Hardcoded API keys and undeclared environment requirements are disproportionate and inconsistent with the SKILL metadata.
Persistence & Privilege
Skill does not request always:true, does not modify other skills or agent config, and is user‑invocable only. It does perform autonomous network calls when its scripts run, but that is expected for this functionality.
What to consider before installing
This skill's code mostly matches its description, but the presence of a repeated hardcoded Finnhub API key and undeclared env vars is a red flag. Before installing or running: 1) Ask the author to confirm the legitimacy of the hardcoded API key and remove it from source; provide a documented FINNHUB_API_KEY env var instead. 2) Treat network access to third‑party endpoints (futunn.com, qt.gtimg.cn, finnhub.io, ai.6551.io, longbridgeapi) as expected but review their privacy/usage policies. 3) If you must run it now, run in an isolated environment (container/VM) and avoid exposing any sensitive local credentials. 4) Prefer a version where keys are not embedded and required environment variables are declared in metadata; verify any external API tokens are your own and not someone else’s leaked key.

Like a lobster shell, security has layers — review code before you run it.

Current versionv2.1.0
Download zip
HKvk971sv6asznjd1423c0f228g898372g9USvk971sv6asznjd1423c0f228g898372g9financevk971sv6asznjd1423c0f228g898372g9latestvk97d61hh2vrr47pwcj419axwbh837ex0marketvk971sv6asznjd1423c0f228g898372g9stockvk971sv6asznjd1423c0f228g898372g9

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

Binspython, curl

SKILL.md

Stock Analyst - 智能股票分析系统 v2.1

简介

智能股票分析助手,支持港股、美股和A股实时行情查询,采用富途(Futu)作为主要数据源,确保数据准确可靠。

数据源说明

港股数据 (推荐)

美股数据

  • 数据源: Finnhub API
  • 备用: 富途牛牛

A股数据

  • 数据源: 腾讯财经API

功能特性

1. 实时行情 (富途核实)

  • 当前价格、涨跌幅
  • 总市值、市盈率
  • 52周高低点
  • 资金流向

2. 技术指标

  • RSI(14)、MACD
  • 均线(MA5/10/20)
  • 支撑位/阻力位

3. 分析师评级

  • 强力推荐/买入/持有/卖出比例
  • 目标价(最高/平均/最低)
  • 上涨空间计算

4. 综合报告 (7大板块)

  1. 基本信息
  2. 实时行情
  3. 技术指标
  4. 同类公司对比
  5. 行业背景
  6. 综合判断
  7. 操作建议

支持的股票代码

港股 (5位数代码)

股票代码
波司登03998
平安好医生01833
众安在线06060
京东物流02618
腾讯00700
阿里巴巴09988
美团03690

美股 (英文代码)

股票代码
京东JD
阿里巴巴BABA
特斯拉TSLA
苹果AAPL
英伟达NVDA

A股 (6位数代码)

股票代码
中国石油601857
贵州茅台600519
宁德时代300750
比亚迪002594

使用方式

直接对话分析港股

分析 03998 波司登
查一下01833
分析港股 00700

命令行

python analyze_stock.py 03998

响应示例

=================================================================
  波司登 (03998.HK) 全面分析报告
=================================================================

【基本信息】
  股票名称: 波司登国际控股有限公司
  股票代码: 03998.HK
  行业: 服装/羽绒服

【实时行情】
  当前价格:  HK$4.13
  涨跌额:    +HK$0.04 (+0.98%)
  总市值:    HK$482.53亿
  市盈率TTM: 12.33

【技术指标】
  日涨跌幅: +0.98% (小幅上涨)
  距目标价: +39% (HK$5.74)

【同类公司对比】
  (服装板块对比数据)

【行业背景】
  羽绒服高端化趋势
  国产品牌崛起

【综合判断】
  分析师: 强力推荐 91.43%
  评分: 70/100

【操作建议】
  评级: 建议买入
  目标价: HK$5.74
  止损: HK$3.80

=================================================================

版本历史

  • v2.1.0: 新增富途数据源,港股数据准确可靠
  • v2.0.0: 整合技术指标和新闻分析
  • v1.0.0: 初始版本,支持港股/美股行情查询

Files

22 total
Select a file
Select a file to preview.

Comments

Loading comments…