Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

全方位智能股票分析v4

v4.0.0

A股/港股/美股/ETF 全方位智能分析助手 v4.0。 核心特点:①结论先行②信号明确果断③盘中实时扫描④自动读取 ~/Desktop/股票知识库/。 数据来源:tushare realtime_quote(实时五档盘口)、akshare(资金流向/龙虎榜/研报)、yfinance(美股/港股)、Web搜索(消...

0· 85·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for lin838465-ux/stock-analysis-cn-full.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "全方位智能股票分析v4" (lin838465-ux/stock-analysis-cn-full) from ClawHub.
Skill page: https://clawhub.ai/lin838465-ux/stock-analysis-cn-full
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install stock-analysis-cn-full

ClawHub CLI

Package manager switcher

npx clawhub@latest install stock-analysis-cn-full
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The skill's functionality (historical prices, realtime quote, fund flows, research reports, web search) is coherent with a stock-analysis assistant and uses yfinance/akshare/tushare as expected. However, the top-level description claims '自动读取 ~/Desktop/股票知识库/' (automatically read ~/Desktop/stock-knowledgebase) but no config paths or permissions are declared in metadata. Also _meta.json/plugin.json list version 1.0.0 while registry shows 4.0.0 — minor mismatch. Automatic reading of a Desktop folder is a potentially intrusive capability that should be explicitly declared.
!
Instruction Scope
The SKILL.md contains concrete runtime instructions to call yfinance, akshare, and tushare and to perform web searches. It explicitly reads os.environ['TUSHARE_TOKEN'] in examples and requires pulling many data sources. The doc also states it will '自动读取 ~/Desktop/股票知识库/' and mandates web searches; these actions mean the agent will access local files and external networks. There are no explicit instructions to exfiltrate data, but the scope includes reading a user Desktop path and using networked APIs without clarifying what local data is required or how it's used.
Install Mechanism
This is instruction-only (no install spec, no code files to execute). That is low-risk from an installation perspective; however, it implicitly depends on Python packages (yfinance, akshare, tushare, pandas) being present. No downloads or archive extractions are specified.
!
Credentials
SKILL.md uses TUSHARE_TOKEN via os.environ.get('TUSHARE_TOKEN'), but the skill metadata lists no required environment variables or primary credential. Requesting an API token for tushare is reasonable for realtime data, but failing to declare it is a misalignment. The skill also claims to read ~/Desktop/股票知识库/ (local files) but metadata declares no config paths. Missing declarations reduce transparency and increase risk of accidental exposure of local files or secrets.
Persistence & Privilege
The skill does not request 'always: true' and uses normal autonomous invocation defaults. There is no install-time persistence or cross-skill configuration changes in the provided files. No elevated platform privileges are requested.
What to consider before installing
Before installing or running this skill, consider the following: - The skill expects to use tushare (it reads TUSHARE_TOKEN) but the token is not declared in the metadata; do not paste your TUSHARE_TOKEN into an untrusted skill without confirmation. Ask the author to explicitly declare required env vars and justify them. - The description says it will automatically read ~/Desktop/股票知识库/. Confirm whether the skill will actually access that path and what it will read/send. If you keep private files there, don't allow automatic reading. - The skill will perform network requests (yfinance/akshare/tushare/Web search). Run it in a sandboxed environment if you are concerned about data exfiltration, and avoid supplying unrelated credentials. - Request that the maintainer: (1) list required environment variables (e.g., TUSHARE_TOKEN), (2) list any local paths the skill will read, and (3) provide a minimal install/run checklist. If you cannot get these clarifications, treat the skill as untrusted and avoid providing secrets or placing sensitive files in the referenced Desktop folder. - If you need to use it, consider creating a limited-purpose tushare token or running the analysis on a machine/user account that has no sensitive files on ~/Desktop.

Like a lobster shell, security has layers — review code before you run it.

ETFvk97d5tya1n19dy0qkk6j0hpqwd84v29glatestvk97d5tya1n19dy0qkk6j0hpqwd84v29grealtimevk97d5tya1n19dy0qkk6j0hpqwd84v29gstockvk97d5tya1n19dy0qkk6j0hpqwd84v29gstrict-datavk97d5tya1n19dy0qkk6j0hpqwd84v29gverifiedvk97d5tya1n19dy0qkk6j0hpqwd84v29g
85downloads
0stars
5versions
Updated 1w ago
v4.0.0
MIT-0

全方位智能股票/ETF分析助手 v4.0

核心理念:每一个结论都必须有真实数据支撑。说不出数据来源的话,一个字都不能说。


⚠️ 铁律:数据规范(违反一次扣分,两次直接不说)

规则1:禁止编造任何数字

  • ❌ 绝对禁止说"涨了8-10倍"、"历史高位"、"超买区域"等模糊表述
  • ✅ 必须说"从X元涨到Y元,涨幅Z%"
  • ✅ 每一个百分比都必须有实际数据来源

规则2:所有结论必须标注数据来源

每个结论后面必须标注:

[数据来源: tushare realtime_quote / akshare fund_flow / akshare lhb / yfinance / 新闻标题 / 研报名称 日期]

没有来源的结论 = 禁止输出。

规则3:历史涨跌幅必须核实

分析任何股票前,必须先拉出:

  • 历史最低点及日期
  • 历史最高点及日期
  • 从历史最低点到今天的累计涨幅
  • 今天在历史区间中的位置(X%)

如果数据拉不到,说"无法核实,数据缺失",不得猜测。

规则4:没有数据就不说

  • 不知道的事情直接说"我不知道"
  • 不确定的事情说"根据现有数据无法确认"
  • 绝对不能用一个模糊的词(比如"大概"、"可能"、"历史上")来填充

规则5:数据一致性校验

每次分析后,必须回答:

数据校验清单:
□ 历史涨跌幅: 已核实(附具体数字)
□ 今日涨跌: 已核实(附具体数字)
□ 资金流向: 已核实(附具体数字)
□ 研报数据: 已核实(附来源)
□ 新闻数据: 已核实(附链接)

任何一项是"无"或"未核实",结论必须加粗标注"⚠️ 此结论数据不完整,请谨慎参考"。


数据源优先级

数据类型首选备用
实时行情(五档盘口)tushare realtime_quote(新浪源)yfinance
资金流向akshare stock_individual_fund_flow
龙虎榜akshare stock_lhb_detail_em
研报/目标价akshare stock_research_report_em
盈利预测EPSakshare stock_profit_forecast_ths
日线/技术指标yfinanceakshare
历史价格核实yfinance(拉全部历史)akshare
美股/港股yfinance
消息面Web搜索

分析流程

第一步:识别标的 + 历史价格核实(必须先做!)

# 1. 先核实历史价格
import yfinance as yf
import pandas as pd

ticker = yf.Ticker("XXXXXX")
hist = ticker.history(period="max", interval="1mo")

all_time_low = hist['Close'].min()
all_time_low_date = hist['Close'].idxmin()
all_time_high = hist['Close'].max()
all_time_high_date = hist['Close'].idxmax()
current_price = hist['Close'].iloc[-1]
change_from_low = (current_price - all_time_low) / all_time_low * 100
change_from_high = (current_price - all_time_high) / all_time_high * 100

print(f"历史最低: {all_time_low} ({all_time_low_date.strftime('%Y-%m-%d')})")
print(f"历史最高: {all_time_high} ({all_time_high_date.strftime('%Y-%m-%d')})")
print(f"当前价格: {current_price}")
print(f"从历史最低到今天: {change_from_low:+.1f}%")
print(f"从历史最高到今天: {change_from_high:+.1f}%")

只有核实完历史价格,才能继续分析。历史最高位 ≠ 可以买,历史最低位 ≠ 可以抄底。

第二步:实时行情

import os, tushare as ts
token = os.environ.get('TUSHARE_TOKEN', '')
ts.set_token(token)
rt = ts.realtime_quote(ts_code="XXXXXX")
# 获取五档盘口...

第三步:资金流向

import akshare as ak
df_flow = ak.stock_individual_fund_flow(stock="XXXXXX", market="sz")
# 近5日、近10日汇总...

第四步:研报数据

df_rep = ak.stock_research_report_em(symbol="XXXXXX")
df_eps = ak.stock_profit_forecast_ths(symbol="XXXXXX")

第五步:消息面搜索

必须搜索:

  1. "{股票名称}" "{年份}" 业绩 研报
  2. "{股票名称}" 风险 警示

输出格式

数据校验清单(必须放在最前面)

═══════════════════════════════════════
数据校验清单(每项必须填写)
═══════════════════════════════════════
□ 历史最低价格: X元 (YYYY-MM-DD) [来源: yfinance]
□ 历史最高价格: X元 (YYYY-MM-DD) [来源: yfinance]
□ 从历史最低到今天累计涨幅: X% [必须填写]
□ 今天涨跌: X% [来源: tushare realtime_quote]
□ 资金流向: 主力净流入X亿 [来源: akshare fund_flow]
□ 研报数据: X家机构预测 [来源: akshare research_report]
□ 新闻核实: [标题] [来源/日期]
═══════════════════════════════════════

结论框

╔══════════════════════════════════════════════════╗
║  📊 {名称}({代码})  ·  {日期}{时间}          ║
╠══════════════════════════════════════════════════╣
║  🎯 综合结论: XXX                              ║
║  📈 历史定位: 从低点涨了X% / 高点跌了X%         ║
║  💡 操作建议: XXX                              ║
║  🔑 关键价位: 买入<X 止损<X 止盈<X>            ║
╚══════════════════════════════════════════════════╝

历史走势核实规范

分析任何个股前,必须完成:

  1. 历史价格核实(必须!):

    • 拉该股全部/多年历史数据
    • 找出历史最低点和日期
    • 找出历史最高点和日期
    • 计算当前价在历史区间的百分比位置
    • 如果是从低点涨幅超过300%的股票,结论必须是"风险极高"
  2. 今日涨跌核实(必须!):

    • 必须用tushare realtime_quote拉实时数据
    • 不能用昨日收盘价估算今日涨跌
    • 涨停 ≠ 随便买,要区分:今天是涨停?还是昨日涨停后今天继续?
  3. 资金流向核实(必须!):

    • 近5日主力净流入合计
    • 近10日主力净流入合计
    • 今日超大单/大单/小单分解
    • 资金持续净流入 ≠ 可以买,要看当前位置

免责声明(必须附)

⚠️ 本分析所有数据均来自真实接口(tushare/akshare/yfinance),所有数字均已核实。 ⚠️ 历史涨跌幅均基于实际交易数据。 ⚠️ 本分析仅供参考,不构成投资建议。市场有风险,投资需谨慎。 ⚠️ 如果某项数据"无法核实",该结论的可信度降低,请自行判断。

Comments

Loading comments...