Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Justice Plutus

v2.1.0

Local A-share analysis with Markdown/JSON reports, optional Feishu notifications, and optional iFinD enhancement.

9· 1.2k·2 current·3 all-time
byWu Bo Yu@etherstrings

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for etherstrings/justice-plutus.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Justice Plutus" (etherstrings/justice-plutus) from ClawHub.
Skill page: https://clawhub.ai/etherstrings/justice-plutus
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Required env vars: OPENAI_API_KEY
Required binaries: python3
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install justice-plutus

ClawHub CLI

Package manager switcher

npx clawhub@latest install justice-plutus
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description, required binary (python3), and required primary env (OPENAI_API_KEY) align with an LLM-powered local analysis pipeline. The skill explicitly requires a local JusticePlutus repository to exist, which explains the minimal files included here.
Instruction Scope
SKILL.md and the shipped wrapper script consistently instruct running the local pipeline (sh .../run_analysis.sh -> python -m justice_plutus run ...). The instructions explicitly reference optional notification/enhancement flows and the optional env vars needed for them. This is expected, but running the local module will execute arbitrary code from the user's JusticePlutus repository and may perform network calls (search providers, iFinD, Feishu, Telegram) when corresponding keys are present.
Install Mechanism
No install spec; instruction-only with a small wrapper script. Nothing is downloaded or extracted by the skill bundle itself.
Credentials
The skill declares OPENAI_API_KEY as the primary required credential, which is reasonable for LLM analysis. SKILL.md also lists numerous optional secrets (AIHUBMIX_KEY, GEMINI_API_KEY, IFIND_REFRESH_TOKEN, WENCAI_COOKIE, HSCLOUD_* tokens, FEISHU_WEBHOOK_URL, etc.) used only for optional enhancements. Those optional credentials are proportional to the optional features but should only be provided if the user intends to enable those enhancements.
Persistence & Privilege
always is false and the skill does not request system-wide changes or modify other skills. It only runs a local command and exports per-run environment variables when flags are used.
Assessment
This skill is internally consistent with its goal of running a local LLM-powered A-share analysis pipeline. Before installing or running: 1) ensure you have the actual JusticePlutus repository from a trusted source on the machine (the script runs python -m justice_plutus, which will execute that repository's code); 2) only provide the API keys/cookies you actually need (do not paste unrelated credentials); 3) review the JusticePlutus code (networking, webhook logic) if you plan to enable notifications or external enhancements; 4) consider running initial tests in a contained environment (VM or container) if you are unsure about the repository's provenance; and 5) note that optional features (iFinD, search providers, Feishu, Telegram) will cause network activity and require their own secrets.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

Binspython3
EnvOPENAI_API_KEY
Primary envOPENAI_API_KEY
latestvk97b6gjdz8nv62zv7ep3cca2p983zpdg
1.2kdownloads
9stars
8versions
Updated 2h ago
v2.1.0
MIT-0

JusticePlutus Local A-share Analysis

Payment / Donation Notice

This skill is free to install on ClawHub, but it is donation-supported.

If JusticePlutus helps you save time, please support ongoing use and maintenance here:

Purpose

Run the local JusticePlutus pipeline for one or more A-share stock codes and produce structured Markdown and JSON reports.

This skill stays local-first:

  • it runs the local repository on the current machine
  • it does not convert the workflow into a hosted service
  • it does not replace your existing cron or GitHub Actions setup

Inputs

  • Stock codes: comma-separated 6-digit A-share codes
  • Optional runtime mode:
    • local report only
    • local report + notifications
    • dry-run data fetch
    • local report + iFinD enhancement

Outputs

  • reports/YYYY-MM-DD/stocks/<code>.md
  • reports/YYYY-MM-DD/stocks/<code>.json
  • reports/YYYY-MM-DD/summary.md
  • reports/YYYY-MM-DD/summary.json
  • reports/YYYY-MM-DD/run_meta.json

Current Capabilities

Base capabilities:

  • daily + realtime market data analysis
  • chip-distribution aware decision dashboard
  • structured Markdown / JSON report generation
  • local single-run execution for one or more stock codes

Optional enhancements when configured:

  • search enhancement through Bocha / Tavily / SerpAPI
  • chip enhancement through Wencai / HSCloud and fallback sources
  • iFinD financial enhancement for fundamentals, valuation, and consensus forecast
  • notifications to configured channels, including Feishu and Telegram

Commands

Analyze now

Trigger phrases: "analyze stock", "analyze A-share", "JP analyze"

Command:

sh justice-plutus/scripts/run_analysis.sh "<codes>"

This keeps the run local and writes reports without sending notifications.

Analyze and notify

Trigger phrases: "analyze and notify", "run with notifications"

Command:

sh justice-plutus/scripts/run_analysis.sh "<codes>" --notify

If Feishu, Telegram, or other supported channels are configured in the local environment, notifications will be sent.

Data-only check

Trigger phrases: "dry run", "data only"

Command:

sh justice-plutus/scripts/run_analysis.sh "<codes>" --dry-run

Analyze with iFinD enhancement

Trigger phrases: "run with ifind", "fundamental enhancement", "financial enhancement"

Command:

sh justice-plutus/scripts/run_analysis.sh "<codes>" --ifind

This enables:

  • ENABLE_IFIND=true
  • ENABLE_IFIND_ANALYSIS_ENHANCEMENT=true

for the current run only.

Analyze with notifications and iFinD

Command:

sh justice-plutus/scripts/run_analysis.sh "<codes>" --ifind --notify

Notes

Core runtime requirement:

  • a working local JusticePlutus repository
  • Python runtime
  • at least one usable LLM key path such as:
    • OPENAI_API_KEY
    • AIHUBMIX_KEY
    • GEMINI_API_KEY
    • ANTHROPIC_API_KEY
    • DEEPSEEK_API_KEY

Optional enhancement configuration:

  • search enhancement:
    • BOCHA_API_KEYS
    • TAVILY_API_KEYS
    • SERPAPI_API_KEYS
  • chip enhancement:
    • WENCAI_COOKIE
    • HSCLOUD_AUTH_TOKEN or HSCLOUD_APP_KEY + HSCLOUD_APP_SECRET
  • iFinD enhancement:
    • IFIND_REFRESH_TOKEN
    • optional run flags --ifind
  • Feishu notifications:
    • FEISHU_WEBHOOK_URL

Behavior guarantees:

  • this skill operates on the local repository and does not call GitHub Actions
  • iFinD is enhancement-only and does not replace the main analysis chain
  • missing optional enhancement keys should not block the core local run
  • notifications are optional and only fire when channels are configured and --notify is used
  • the skill is donation-supported; the donate page includes GitHub Sponsor, Alipay, and WeChat options

Support

Donate

Alipay:

Alipay QR

WeChat Pay:

WeChat Pay QR

Comments

Loading comments...