Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Stock Expert

v1.0.0

专业股票分析师,提供实时行情解读、技术指标分析、潜力股筛选及投资建议,包括风险提示和仓位管理。

0· 122·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for sionyugg-a11y/stock-expert-cn.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Stock Expert" (sionyugg-a11y/stock-expert-cn) from ClawHub.
Skill page: https://clawhub.ai/sionyugg-a11y/stock-expert-cn
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install stock-expert-cn

ClawHub CLI

Package manager switcher

npx clawhub@latest install stock-expert-cn
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
high confidence
Purpose & Capability
The skill claims to do stock analysis (real-time quotes, indicators, screening) and the analyzer.py implements those functions using Tushare/Finnhub — those credentials reasonably belong here. However, the registry metadata earlier reported no required env vars/binaries while SKILL.md embeds required env variables and installation steps, which is an internal inconsistency.
!
Instruction Scope
SKILL.md instructs use of TUSHARE_TOKEN and FINNHUB_TOKEN and includes cron setup commands and dependency installs. More importantly, the README/SKILL.md contains a concrete TUSHARE_TOKEN value (hard-coded example) — this is sensitive and unexpected for a published package and increases risk of token leakage or misuse.
Install Mechanism
There is no registry install spec, but SKILL.md includes an embedded pip install requirement for pandas, numpy, ta-lib, requests. Installing pip packages is expected for this skill; ta-lib can require native libs which raises operational friction but not direct maliciousness. The mismatch between 'no install spec' in registry and install instructions in SKILL.md is inconsistent.
!
Credentials
The only needed credentials (TUSHARE_TOKEN, optional FINNHUB_TOKEN) are appropriate for market data access. However, the README contains a concrete token value, which is disproportionate and risky: it suggests a leaked/shared credential or that the author embedded a real token. Registry metadata claimed no required env vars, which contradicts the code and SKILL.md.
Persistence & Privilege
The skill does not request always:true, does not claim to modify other skills or system settings, and does not demand elevated persistence. Cron commands are user-invoked examples, not automatic privileged actions.
What to consider before installing
What to consider before installing: - Do not reuse the TUSHARE_TOKEN shown in the README/ SKILL.md. That value looks like a concrete token and may be leaked; if you provided that token anywhere, rotate it immediately. - The skill legitimately needs market-data tokens (TUSHARE_TOKEN, FINNHUB_TOKEN). Only provide tokens you control and that have appropriate scopes/limits. - The package requests Python libs including ta-lib (which often requires native libraries). Install in a virtualenv or sandbox to avoid system-wide side effects. - The registry metadata (no envs, no install) disagrees with the embedded SKILL.md and analyzer.py. Ask the author/maintainer to reconcile metadata before trusting automatic installs. - Review analyzer.py yourself (it's included) or run it in an isolated environment to confirm behavior; it uses tushare and requests but does not contain obvious exfiltration code or external endpoints beyond standard APIs. - Because the skill source/owner is unknown, prefer running it in a container/VM, limit provided credentials to least privilege, and audit network activity if you test it. - If you plan to use the skill in production or share access, request the author to remove hard-coded tokens from docs and publish correct registry metadata and a provenance statement.

Like a lobster shell, security has layers — review code before you run it.

latestvk97cjg871ytn0b4kbg5r1s4tfx83ge5k
122downloads
0stars
1versions
Updated 1mo ago
v1.0.0
MIT-0

股票分析专家智能体

专业股票分析师,专注于:

  1. 实时行情分析与技术指标解读
  2. 行业轮动与资金流向追踪
  3. 事件驱动投资机会挖掘
  4. 每日筛选 5 支潜力股并生成详细报告
  5. 提供风险提示与仓位建议

核心功能

1. 实时行情分析

  • 查询个股实时行情
  • 技术指标分析(MACD/RSI/KDJ)
  • K 线形态识别

2. 板块轮动追踪

  • 行业资金流向排名
  • 板块热度分析
  • 轮动趋势判断

3. 潜力股筛选

  • 多因子选股模型
  • 技术面 + 基本面双重筛选
  • 每日 5 支潜力股推荐

4. 投资建议

  • 买入/卖出/持有建议
  • 仓位管理策略
  • 风险提示

使用场景

盘前准备(9:00)

生成今日早盘报告,分析隔夜消息和今日热点预判

盘中盯盘

查看 000001.SZ 实时行情和技术指标
扫描今日资金流入前 10 的板块

潜力股挖掘

筛选科技板块中近期有资金流入、技术面看好的 5 支股票
分析贵州茅台的基本面和估值情况

交易复盘

分析我今天买入的 3 支股票决策是否合理
生成本周交易复盘报告

定时任务

# 每日 9:00 自动生成早盘报告
openclaw cron add "0 9 * * *" "生成今日早盘策略报告"

# 收盘后自动分析(工作日 15:30)
openclaw cron add "30 15 * * 1-5" "分析今日市场表现和明日机会"

高级技巧

组合使用技能

  1. 先用 market-environment-analysis 评估大市环境
  2. 再用 sector_rotation 找出强势板块
  3. 最后用 stock_recommend 筛选具体标的

自定义筛选策略

筛选条件:
- 市盈率 < 20
- 近 5 日涨幅 > 10%
- 成交量放大
- 所属板块资金流入前 3
- 技术指标金叉

风险控制

- 分析当前持仓的风险敞口和分散度
- 评估市场环境评分,调整仓位建议

依赖技能

本智能体需要以下技能支持:

  • stock-analysis - 投资组合分析
  • tushare - A 股数据源
  • finnhub - 全球行情 + 新闻
  • stock-watcher - 自选股监控
  • china-stock-analysis - A 股深度分析

环境变量配置

# Tushare Token(已配置)
export TUSHARE_TOKEN="abfa8a1c06b30afd16dbe62e0c656dc769f4c56280d7c686556761b2"

# Finnhub Token(可选,用于全球数据)
export FINNHUB_TOKEN="your_finnhub_token"

输出格式

早盘报告模板

# 📊 早盘策略报告 - YYYY-MM-DD

## 隔夜市场
- 美股:涨跌情况
- A50 期货:涨跌
- 汇率:人民币走势
- 大宗商品:原油/黄金

## 今日热点预判
1. 板块 1(逻辑)
2. 板块 2(逻辑)
3. 板块 3(逻辑)

## 操作策略
- 仓位建议:XX%
- 关注方向:XXX
- 风险提示:XXX

个股分析模板

# 📈 个股分析 - 股票名称 (代码)

## 实时数据
- 最新价:XX.XX
- 涨跌幅:X.XX%
- 成交量:XX 万手
- 成交额:XX 亿元

## 技术指标
- MACD:金叉/死叉
- RSI:超买/超卖
- KDJ:金叉/死叉

## 基本面
- PE(TTM):XX
- PB:XX
- ROE:XX%

## 操作建议
- 短线:买入/持有/卖出
- 中线:买入/持有/卖出
- 目标价:XX.XX
- 止损价:XX.XX

免责声明

⚠️ 所有分析和建议仅供参考,不构成投资建议。股市有风险,投资需谨慎。


最后更新:2026-03-24

Comments

Loading comments...