Sequoia-X

A股量化选股系统 Sequoia-X V2 的安装、配置与使用。当用户要求安装 Sequoia-X、使用 Sequoia-X 选股、运行量化策略、配置飞书推送时激活。

Security Scan

The skill largely does what it says (installs and runs a Chinese A-share quant system), but it asks to clone and execute code from a remote GitHub repo and its declared requirements are inconsistent with the actual install/run behavior — review before installing.

Purpose & Capability

The skill's stated purpose (install/configure/run Sequoia-X) matches the included scripts and docs, but the manifest declares no required binaries or env vars while the install/run clearly assume git, python/pip and a FEISHU_WEBHOOK_URL in ~/.sequoia-x/.env. Omitting those expected requirements is an incoherence that could mislead users.

Instruction Scope

SKILL.md instructs the agent/user to run the included install.sh which git-clones https://github.com/sngyai/Sequoia-X.git and later runs python main.py from that cloned repo. That means the skill will execute remote, non-bundled code (main.py and other repo files) which are not present in the skill package for review — this expands runtime scope beyond the local scripts and introduces risk.

Install Mechanism

Installation uses git clone from a GitHub repo and pip install of well-known Python packages (akshare, pandas, requests, etc.). These are common mechanisms and not inherently malicious, but they cause execution of third-party code and installation of PyPI packages into the user environment (no virtualenv is enforced).

Credentials

The skill does not declare any required environment variables or config paths, yet the documentation requires creating a FEISHU_WEBHOOK_URL entry in ~/sequoia-x/.env and the scripts assume HOME write access. The mismatch (undeclared webhook secret + undeclared reliance on git/python/pip) is disproportionate and reduces transparency about what secrets/configs will be used.

Persistence & Privilege

The skill is not always-enabled and does not request elevated platform privileges. It writes files under ~/sequoia-x (normal for an installed project) and does not modify other skills or system-wide agent configuration in the provided scripts.

What to consider before installing

Before installing: 1) Inspect the upstream repository (https://github.com/sngyai/Sequoia-X) — especially main.py and any network/webhook logic — because the install will clone and run that code. 2) Confirm you have git, Python and pip and consider running install inside a dedicated venv or sandbox to avoid contaminating your global environment. 3) The skill asks you to put a FEISHU webhook URL into ~/sequoia-x/.env; that is a secret-like endpoint — only provide a webhook you control and expect that the code will POST selected stock lists to it. 4) If you cannot review the cloned repo, treat this as higher risk: either run in an isolated VM/container or avoid installing. 5) The skill metadata should have declared git/python/pip and the webhook requirement — the absence is an incoherence; ask the publisher to correct the manifest or provide code bundled with the skill for review.

Sequoia-X V2 · A股量化选股系统

数据源：akshare（免费开源）| 数据库：SQLite | 推送：飞书群机器人

安装（一键）

SKILL_DIR=$(find ~/.openclaw/skills -name "install.sh" -path "*/sequoia-x/*" -exec dirname {} \; | head -1)
bash "${SKILL_DIR}/scripts/install.sh

安装到 ~/sequoia-x，包含：clone 仓库 + pip 依赖 + 生成 .env 配置。

安装后必须编辑 ~/sequoia-x/.env，填入飞书 Webhook URL：

FEISHU_WEBHOOK_URL=https://open.feishu.cn/open-apis/bot/v2/hook/your-token-here

运行

SKILL_DIR=$(find ~/.openclaw/skills -name "run.sh" -path "*/sequoia-x/*" -exec dirname {} \; | head -1)
bash "${SKILL_DIR}/scripts/run.sh

• 工作日：增量同步行情 → 执行全部策略 → 推送飞书
• 周末/节假日：跳过网络拉取，用本地数据调试

策略一览

详见 references/strategies.md（含参数调整建议）

策略	逻辑
MaVolumeStrategy	MA5 金叉 MA20 + 成交量放大
TurtleTradeStrategy	20日新高突破 + 成交额过亿
HighTightFlagStrategy	强动量后极度收敛缩量
LimitUpShakeoutStrategy	涨停洗盘
UptrendLimitDownStrategy	趋势中跌停
RpsBreakoutStrategy	RPS突破

调参路径

• 策略源码：~/sequoia-x/sequoia_x/strategy/<策略名>.py
• 详细参数说明：references/strategies.md
• 注册新策略：编辑 ~/sequoia-x/main.py，在 strategies 列表追加类名

数据位置

~/sequoia-x/
├── .env                    # 配置文件（需手动填写 Webhook）
├── data/sequoia_v2.db     # SQLite 数据库
└── sequoia_x/strategy/    # 策略源码

调试命令

# 查看数据库已有数据
sqlite3 ~/sequoia-x/data/sequoia_v2.db ".tables"

# 强制全量重新同步
rm ~/sequoia-x/data/sequoia_v2.db
SKILL_DIR=$(find ~/.openclaw/skills -name "run.sh" -path "*/sequoia-x/*" -exec dirname {} \; | head -1)
bash "${SKILL_DIR}/scripts/run.sh"