Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

市场机会侦察兵

v1.0.0

市场机会侦察兵 - 自动监控 A/H 股市场异动、财经新闻、热点板块,生成投资机会简报。适合投资者、交易员、金融从业者。

0· 85·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for yoriko233/market-opportunity-scout.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "市场机会侦察兵" (yoriko233/market-opportunity-scout) from ClawHub.
Skill page: https://clawhub.ai/yoriko233/market-opportunity-scout
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install market-opportunity-scout

ClawHub CLI

Package manager switcher

npx clawhub@latest install market-opportunity-scout
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Suspicious
high confidence
!
Purpose & Capability
SKILL.md describes realtime market monitoring, news aggregation, configurable thresholds, a ~/.market-scout/config.json, and use of akshare for market data. The included script, however, prints a canned report, uses hard-coded lists for sectors/stocks/news, and only issues two curl requests for indices. The declared capability (full monitoring, config file support, akshare) is not implemented by the code — mismatch suggests the package is incomplete, misleading, or poorly maintained.
!
Instruction Scope
Runtime instructions tell the user to install akshare/pandas, use a config file, and run CLI commands that imply file output and cron scheduling. The script does not read any config file, does not import akshare, and writes to stdout rather than handling --output or persisting to the documented path. The SKILL.md gives broader permissions/scope than the code performs, and the vague 'news: 公共 RSS/爬虫' promise is not implemented in the code.
Install Mechanism
There is no install spec (instruction-only install), which is low-risk. However, SKILL.md instructs users to pip install akshare and pandas even though the distributed script doesn't use them; this inconsistency could confuse users or cause unnecessary package installs but is not itself an install-time code-execution risk.
Credentials
The skill requests no environment variables, no credentials, and no config paths in its manifest. The code likewise does not access env vars or secret files. This is proportionate to the (limited) functionality actually implemented.
Persistence & Privilege
The skill is not always-on and does not request elevated privileges or persistent presence. It also does not modify other skills or system settings. Autonomous invocation is allowed by platform default but is not combined with other concerning privileges here.
What to consider before installing
Do not assume the tool provides the live monitoring and news aggregation described in the docs — the shipped script mostly prints a static report and only fetches two index endpoints. Before installing or automating with cron: 1) ask the author for a corrected release that actually implements akshare/RSS and config-file parsing; 2) review or run the Python script locally to confirm its network calls and output behavior; 3) avoid relying on this for trading decisions (it warns about delays but currently doesn't implement live data); 4) if you must use it, run in a sandboxed environment and redirect cron output explicitly (the script prints to stdout and does not honor an --output flag). If the mismatches remain unexplained, treat the package as incomplete/unreliable and prefer a well-maintained alternative.

Like a lobster shell, security has layers — review code before you run it.

latestvk972n1jfg51cswhxm2zm4a7v8183jcq2
85downloads
0stars
1versions
Updated 1mo ago
v1.0.0
MIT-0

Market Opportunity Scout - 市场机会侦察兵

自动监控资本市场机会,生成结构化投资简报。

功能

  • 📈 异动监控: 实时监控 A/H 股涨跌幅、成交量异常
  • 📰 新闻聚合: 抓取财经新闻、公司公告、市场传闻
  • 🔥 热点追踪: 识别热门板块、概念题材、资金流向
  • 📊 数据简报: 生成结构化报告(Markdown/文本)
  • 定时推送: 支持 cron 定时自动运行

安装

clawhub install market-opportunity-scout

使用

快速启动

# 生成今日市场简报
market-opportunity-scout --mode daily

# 监控特定股票
market-opportunity-scout --stocks 600519,00700,09988

# 监控特定板块
market-opportunity-scout --sectors 白酒,新能源,AI

Cron 定时任务

# 每个交易日早上 8 点生成简报
0 8 * * 1-5 market-opportunity-scout --mode daily --output /path/to/report.md

输出格式

# 市场机会简报 - 2026-03-25

## 📊 大盘概览
- 上证指数:XXXX (+X.XX%)
- 恒生指数:XXXX (+X.XX%)

## 🔥 热门板块
1. 白酒板块 (+3.2%)
2. 新能源 (+2.8%)

## ⚡ 异动个股
- 贵州茅台:+5.2% (放量突破)
- 腾讯控股:+3.8% (北向资金流入)

## 📰 重要新闻
1. [新闻标题 1] - 来源
2. [新闻标题 2] - 来源

## 💡 机会提示
- XXXX 板块连续 3 日资金净流入
- XXXX 个股突破 60 日均线

配置

可选配置文件 ~/.market-scout/config.json:

{
  "stocks": ["600519", "00700", "09988"],
  "sectors": ["白酒", "新能源", "科技"],
  "threshold": {
    "priceChange": 3.0,
    "volumeChange": 50.0
  },
  "output": {
    "format": "markdown",
    "path": "/tmp/market-report.md"
  }
}

API 说明

本技能使用以下数据源(无需 API Key):

  • A 股/港股数据:akshare (开源财经数据接口)
  • 财经新闻:公开 RSS/爬虫

注意事项

  • ⚠️ 数据延迟约 15 分钟,不构成投资建议
  • ⚠️ 仅供研究参考,投资需谨慎
  • ⚠️ 首次运行需安装依赖:pip install akshare pandas

更新日志

v1.0.0 (2026-03-25)

  • 初始版本
  • 支持 A/H 股监控
  • 支持财经新闻聚合
  • 支持定时任务

作者

yoriko233

支持

Issue: https://github.com/yoriko233/market-opportunity-scout/issues

Comments

Loading comments...