Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

股票简单查询

v1.0.0

股票简单分析 - A股/港股/美股实时行情快速查询

0· 248·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for gaoren36-arch/gaoren-stock-simple.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "股票简单查询" (gaoren36-arch/gaoren-stock-simple) from ClawHub.
Skill page: https://clawhub.ai/gaoren36-arch/gaoren-stock-simple
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Required binaries: python
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install gaoren-stock-simple

ClawHub CLI

Package manager switcher

npx clawhub@latest install gaoren-stock-simple
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
high confidence
Purpose & Capability
Name/description promise A股/港股/美股 real-time quotes; code and SKILL.md actually call Tencent (qt.gtimg.cn) for A/HK and Finnhub for US stocks, which is consistent. The skill requires Python but does not formally declare the 'requests' dependency (README mentions pip install requests).
Instruction Scope
SKILL.md and code limit actions to fetching remote quotes and printing results. The instructions do not ask the agent to read unrelated files, environment variables, or system state. Network calls go only to the documented data sources.
Install Mechanism
There is no install spec (instruction-only), so nothing is written to disk beyond included files. README suggests installing the requests package but the skill does not provide a formal requirements/install step.
!
Credentials
The code contains a hardcoded FINNHUB API key string (FINNHUB_KEY embedded in simple_stock.py) rather than using an environment variable; embedding a third-party credential in distributed code is risky (exposes the key, can be abused, causes accountability/rate-limit concerns). The skill requests no user credentials, so the embedded key is unexpected and disproportionate.
Persistence & Privilege
always is false and the skill is user-invocable. It does not request persistent system-level privileges or modify other skills/configuration.
What to consider before installing
This skill largely does what it says (fetches stock quotes from Tencent and Finnhub), but the code includes a hardcoded Finnhub API key baked into simple_stock.py and doesn't formally declare the requests dependency. Hardcoded API keys can be abused by whoever controls the code and may cause unexpected rate limits or privacy issues. Before installing or running: 1) Prefer a version that accepts your own FINNHUB API key via an environment variable (e.g., FINNHUB_KEY) instead of a hardcoded token. 2) Confirm you trust the endpoints (qt.gtimg.cn and finnhub.io) because queries will be sent there. 3) Install requests in a controlled environment (virtualenv) and audit network access if needed. 4) If you rely on privacy or corporate network controls, do not run code that makes outbound HTTP requests without review. If the author cannot justify the embedded key or provide an env-var-based option, treat the package as risky.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

Binspython
latestvk97f8v0rydytkfechgv31jwzdn836kkh
248downloads
0stars
1versions
Updated 13h ago
v1.0.0
MIT-0

Stock Analyst Simple - 股票简单分析

简介

股票快速查询工具,简单直接获取A股、港股和美股的实时行情。

数据源

市场数据源
A股腾讯财经API
港股腾讯财经API
美股Finnhub API

支持的股票代码

A股 (6位数)

601857 中国石油 | 600519 贵州茅台 | 300750 宁德时代

港股 (5位数)

00700 腾讯 | 09988 阿里巴巴 | 02618 京东物流

美股 (英文)

JD 京东 | BABA 阿里巴巴 | TSLA 特斯拉

使用方式

查一下 601857
看看腾讯
茅台多少钱

输出示例

【中国石油】601857
价格: 12.14 CNY
涨跌: +0.01 (+0.28%)

Comments

Loading comments...