Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Stock Analyzer | 股票深度分析

v1.0.0

输入股票代码,深入分析财务数据、估值、护城河,生成投资分析报告

0· 302·1 current·1 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for jearrylee/j-stock-analyzer.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Stock Analyzer | 股票深度分析" (jearrylee/j-stock-analyzer) from ClawHub.
Skill page: https://clawhub.ai/jearrylee/j-stock-analyzer
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install j-stock-analyzer

ClawHub CLI

Package manager switcher

npx clawhub@latest install j-stock-analyzer
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name and description match the instructions: gathering financial data, analyzing valuation and moat, and producing reports. Data sources named (东方财富/新浪/公司年报/Wind) are appropriate for a stock analysis skill.
Instruction Scope
SKILL.md confines actions to fetching public financial data (exec + curl, web_fetch, browser) and producing a structured report. However, it explicitly instructs use of 'exec + curl' (shell execution) which, while reasonable for HTTP requests, grants the agent the ability to run arbitrary shell commands if implemented without proper sandboxing — monitor how exec is implemented in the runtime.
Install Mechanism
Instruction-only skill with no install spec and no code files. Nothing will be written to disk by an installer; lowest install risk.
Credentials
The skill requests no environment variables or credentials, which is proportionate. Minor inconsistency: it names Wind (a paid/data-provider) as a source but does not request credentials or explain how to access paid APIs — likely expects public scraping. If you intend it to use paid APIs, credentials will be needed and should be provided securely.
Persistence & Privilege
always:false and no install/persistence actions. The skill does not request permanent presence or system-wide configuration changes.
Assessment
This skill is coherent for doing stock analysis and appears to only rely on web data. Before installing or enabling it: (1) confirm the runtime sandboxing for shell exec (the SKILL.md asks for 'exec + curl' — ensure the agent cannot run arbitrary host commands you don't expect); (2) know that scraping public sites can produce incomplete or brittle data, and 'Wind' is a paid source (no credentials are declared); (3) avoid supplying any unrelated secrets or API keys unless you understand how they will be used; (4) treat reports as informational only (the skill already includes a disclaimer). If you need use of paid data/APIs, ask the author to declare required credentials and expected endpoints explicitly.

Like a lobster shell, security has layers — review code before you run it.

latestvk97876qsv093wm55sn2aa49scx83r3n9
302downloads
0stars
1versions
Updated 1mo ago
v1.0.0
MIT-0

Stock Analyzer | 股票深度分析

当用户想要了解某只股票的投资价值时,使用此技能进行全面分析。

触发场景

  • 用户问"帮我分析 XXX"
  • 用户问"XXX 这只股票怎么样"
  • 用户问"XXX 值得买吗"
  • 用户想了解某家公司的基本面

分析框架(必须全部覆盖)

1. 基础信息

股票代码:
股票名称:
交易所:
行业:
主营业务:

2. 财务健康度(近3年)

指标202320242025(E)趋势
营业收入(亿)
净利润(亿)
毛利率
净利率
ROE
资产负债率
自由现金流

3. 估值分析

估值指标数值行业平均评价
PE(TTM)
PB
PS
股息率
PEG

4. 护城河分析( Checklist)

  • 品牌护城河:强/中/弱/无
  • 规模护城河:强/中/弱/无
  • 技术护城河:强/中/弱/无
  • 网络效应:强/中/弱/无
  • 成本优势:强/中/弱/无
  • 转换成本:强/中/弱/无
  • 政策/牌照壁垒:强/中/弱/无

5. 风险分析

风险类型风险描述影响程度
行业风险高/中/低
竞争风险高/中/低
政策风险高/中/低
财务风险高/中/低
管理风险高/中/低

6. 管理层评估

  • 管理层诚信度:优秀/良好/一般/差
  • 激励机制:股权激励/现金/无
  • 资本配置历史:良好/一般/差

7. 投资决策(最终结论)

维度评分(1-10)说明
商业模式
财务健康
估值水平
护城河
成长性
风险
综合评分

8. 安全边际评估

当前价格:
内在价值(DCF估算):
安全边际:
是否值得买入:

9. 关键问题清单

  • 这家公司怎么赚钱?(一句话说清楚)
  • 5年后这家公司会怎样?
  • 最大的竞争对手是谁?
  • 买入后跌50%怎么办?

数据获取方式

使用以下工具获取数据:

  1. exec + curl:调用东方财富/新浪财经 API 获取实时数据
  2. web_fetch:抓取公司财报、研报
  3. browser:访问公司官网、年报

输出格式

分析完成后,输出结构化报告,格式如下:

═══════════════════════════════════════
📊 股票深度分析报告:XXX(代码)
═══════════════════════════════════════

【一句话总结】
这只股票值得/不值得投资,因为...

【基础信息】
...

【财务健康度】
...

【估值分析】
...

【护城河评估】
...

【风险提示】
...

【投资决策】
综合评分:X/10
安全边际:XX%
建议操作:买入/持有/卖出

【需要进一步确认的问题】
...

═══════════════════════════════════════
⚠️ 免责声明:本分析仅供参考,不构成投资建议
═══════════════════════════════════════

注意事项

  1. 必须说明数据来源:东方财富/Wind/公司财报/研报等
  2. 保守估算:估值时使用保守假设
  3. 诚实面对不确定性:不确定的地方要明说
  4. 不预测短期股价:分析聚焦于基本面
  5. 关注现金流:利润可以造假,现金流很难造假

快速命令

当用户说"快速分析 XXX"时,只输出核心信息(5项):

  1. 一句话商业模式
  2. 近3年净利润趋势
  3. 当前PE/PB
  4. 护城河强弱
  5. 综合判断:值得深入/不建议

为 LEE 的投资伙伴 J 构建 | 投资有风险,分析仅供参考

Comments

Loading comments...