Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Stock Entry Analyzer

v3.0.0

多指标股票入场分析工具。基于乖离率 (BIAS) 为核心,结合均线/MACD/RSI/成交量/资金流/估值等 7 大类指标,综合判断股票或基金是否适合买入。使用 stock-price-query、stock-market-pro、eastmoney-tools 获取数据,输出检查清单和综合评分。当用户询问"XX...

0· 145·0 current·0 all-time
byLiuLi@liuli4

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for liuli4/stock-entry-analyzer.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Stock Entry Analyzer" (liuli4/stock-entry-analyzer) from ClawHub.
Skill page: https://clawhub.ai/liuli4/stock-entry-analyzer
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install stock-entry-analyzer

ClawHub CLI

Package manager switcher

npx clawhub@latest install stock-entry-analyzer
Security Scan
Capability signals
Requires sensitive credentials
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The skill's behavior (calling stock-price-query, mx-finance-data and eastmoney-related code) is consistent with a stock analysis tool. However, the package/registry metadata declares no required environment variables or credentials while the code explicitly looks up EM_API_KEY and attempts to read /root/.openclaw/workspace/vault/credentials/eastmoney.json. The missing declaration of that secret is an incoherence and reduces transparency.
!
Instruction Scope
SKILL.md and scripts instruct the agent to run local scripts under /root/.openclaw/workspace/skills and to parse files produced by those scripts (Excel), which is expected for data fetching. But the runtime instructions (and code) also attempt to read a vault credentials file and environment variables that are not declared in the metadata. The instructions grant the skill broad discretion to call other on-disk skill scripts and read files in the workspace — this should be explicitly declared and justified.
Install Mechanism
There is no install spec (instruction-only) and code files are included. The scripts call subprocesses and use pandas/xls parsing, but the skill does not declare runtime dependencies (pandas). This is not inherently malicious but is a missing dependency declaration that may cause runtime failures or unexpected installs elsewhere.
!
Credentials
The code reads EM_API_KEY from the environment and falls back to reading /root/.openclaw/workspace/vault/credentials/eastmoney.json. The skill metadata lists no required env vars or primary credential. Requesting or reading vault files (which may contain other secrets) without declaring that need is disproportionate and reduces user control/consent.
Persistence & Privilege
always is false and the skill does not request forced inclusion or modify other skills' configuration. It does execute other skills' scripts and reads files in the workspace, but it does not appear to persist itself or elevate privileges.
What to consider before installing
This skill implements the advertised stock-analysis logic, but it reads an EastMoney API key (EM_API_KEY) and directly accesses a vault file (/root/.openclaw/workspace/vault/credentials/eastmoney.json) while the registry metadata declares no required secrets. Before installing: 1) ask the publisher to declare EM_API_KEY (or other credentials) in the skill metadata and explain why vault access is needed; 2) review or sandbox the skill — it executes other skills' scripts from /root/.openclaw/workspace which could run arbitrary code, so verify those scripts (stock-price-query, mx-finance-data) are trustworthy; 3) ensure required Python packages (pandas, openpyxl) are available or explicitly listed; 4) if you keep secrets in a shared vault, consider restricting this skill's access or running it in an isolated environment; 5) if you can't verify the other skills or the vault contents, do not grant this skill access to your production agent.

Like a lobster shell, security has layers — review code before you run it.

latestvk975gz7ha19kdtrzvf3d1w13h1850f35
145downloads
0stars
4versions
Updated 1w ago
v3.0.0
MIT-0

Stock Entry Analyzer - 多指标股票入场分析

基于刘晨明乖离率方法,结合多指标共振判断股票/基金入场时机。

快速开始

# 分析单只股票
分析 凯莱英 是否适合买入

# 检查入场信号
检查 002821 的买入信号

# 多指标评分
给 宁德时代 做个入场评分

指标体系

一、趋势类 (权重 30%)

指标买入信号数据来源
乖离率 (BIAS)0.6%-1.8%计算:(ln 收盘价/20 日 EMA)-1
均线系统多头排列 (MA5>MA10>MA20)stock-market-pro
MACD金叉 + 红柱放大stock-market-pro

二、动量类 (权重 20%)

指标买入信号数据来源
RSI40-60 区间向上突破stock-market-pro
KDJK 线上穿 D 线stock-market-pro

三、成交量类 (权重 20%)

指标买入信号数据来源
量比1.5-3 倍stock-price-query
主力净流入连续 3 日净流入eastmoney-tools

四、估值类 (权重 30%)

指标买入信号数据来源
PE 分位数<50%eastmoney-tools
PB 分位数<50%eastmoney-tools
ROE>15% 且稳定eastmoney-tools

评分标准

满足条件数评分建议
≥6 项🟢 80-100 分强烈建议入场
4-5 项🟡 60-79 分可以考虑
<4 项🔴 <60 分观望

工作流程

  1. 获取股票代码 - 从用户输入提取股票名称/代码
  2. 调用数据源 - 使用已安装的 stock-* skills 获取数据
  3. 计算乖离率 - 使用 scripts/calc_bias.py
  4. 检查清单 - 逐项判断是否满足买入条件
  5. 输出报告 - 生成评分和建议

输出模板(标准格式)

当分析多只标的时,严格按以下格式输出:

📊 股票入场分析报告 (stock-entry-analyzer 标准格式)

**生成时间:** 2026-03-31 22:54
**分析方法:** 乖离率 (BIAS) + 多指标共振
**数据源:** stock-price-query 实时行情

---

## 📋 综合排名表

| 排名 | 标的 | 代码 | 评分 | 评级 | 建议 |
|------|------|------|------|------|------|
| 1 | 百济神州 | 06160 | 78 分 | 🟡 | 观望 |
| 2 | 腾讯控股 | 00700 | 78 分 | 🟡 | 观望 |
| 3 | 泡泡玛特 | 09992 | 45 分 | 🔴 | 回避 |
| ... | ... | ... | ... | ... | ... |

---

## ⭐ 重点关注标的 (评分≥70 分)

### ① 百济神州 (06160.HK) — 78 分 🟡

**实时行情**
| 指标 | 数值 |
|------|------|
| 股价 | HK$171.60 |
| 涨跌幅 | +0.29% |
| EMA20 | HK$168.00 |
| 乖离率 | +2.14% ⚠️偏高 |

**技术指标**
| 指标 | 当前值 | 信号 |
|------|--------|------|
| 均线 | 多头 | ✅ |
| MACD | 金叉 | ✅ |
| RSI | 40-60 | ✅ |
| KDJ | 金叉 | ✅ |

**检查清单**
- [❌] 乖离率 0.6%-1.8% (2.14% 偏高)
- [✅] 均线多头排列
- [✅] MACD 金叉
- [✅] RSI 40-60 向上
- [✅] KDJ 金叉
- [❌] 量比 1.5-3 倍
- [✅] 主力净流入

**操作建议:** 观望,等待乖离率回落至 0.6%-1.8% 区间

---

[如有多个≥70 分标的,继续添加]

---

## 📉 其他标的摘要

### A 股

| 标的 | 评分 | 乖离率 | 状态 |
|------|------|--------|------|
| 天赐材料 | 23 分 | -5.15% | 空头排列 |
| 赣锋锂业 | 23 分 | -4.41% | 空头排列 |
| ... | ... | ... | ... |

### 港股

| 标的 | 评分 | 乖离率 | 状态 |
|------|------|--------|------|
| 阿里巴巴-W | 38 分 | -2.46% | 震荡 |
| ... | ... | ... | ... |

### 基金/ETF

| 标的 | 评分 | 乖离率 | 状态 |
|------|------|--------|------|
| 科创芯片 ETF | 23 分 | -5.21% | 空头 |
| ... | ... | ... | ... |

---

## 📋 整体策略建议

### 市场状态 🟢/🟡/🔴
**市场描述**

- 平均评分
- 达标标的数量
- 乖离率分布
- 均线系统状态
- MACD 普遍状态

### 配置建议

| 评分 | 标的 | 建议 |
|------|------|------|
| ≥80 分 | XXX | 建议 |
| 60-79 分 | XXX | 建议 |
| <60 分 | XXX | 建议 |

---

⚠️ **风险提示:** 本报告基于技术指标分析,不构成投资建议。市场有风险,投资需谨慎。

单只股票分析简化格式:

## 📊 XX 股票入场分析报告

### 综合评分:🟢 85/100 (强烈建议)

### 指标检查清单
- [✅] 乖离率 1.2% (0.6%-1.8% 区间)
- [✅] 均线多头排列
- [✅] MACD 金叉
- [✅] RSI 52 向上
- [❌] KDJ 死叉
- [✅] 量比 2.1 倍
- [✅] 主力 3 日净流入
- [✅] PE 分位 35%

### 关键数据
| 指标 | 当前值 | 信号 |
|------|--------|------|
| 股价 | ¥110.21 | - |
| 乖离率 | +1.2% | ✅ |
| ... | ... | ... |

### 操作建议
- 入场价位:¥108-112
- 止损位:¥105
- 目标位:¥120

脚本使用

calc_bias.py - 乖离率计算

python scripts/calc_bias.py --symbol 002821 --period 20

参数:

  • --symbol: 股票代码
  • --period: EMA 周期 (默认 20)
  • --output: json|text (默认 text)

参考文档

  • 指标详解: 见 references/indicators.md
  • 刘晨明原文: 见 references/liu-chenming-method.md
  • 评分规则: 见 references/scoring-rules.md

注意事项

  1. 数据时效性 - 盘中数据实时变化,建议在交易时段使用
  2. 指标共振 - 单一指标易失真,需多指标配合
  3. 风险提示 - 本工具仅供参考,不构成投资建议
  4. A 股适用 - 主要针对 A 股优化,港股/美股需调整阈值

相关 Skills

  • stock-price-query - 实时股价查询
  • stock-market-pro - 技术指标图表
  • eastmoney-tools - 东方财富数据
  • stock-monitor-skill - 预警系统

Comments

Loading comments...