Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

A股复盘转公众号格式工具

v1.2.0

【内容创作者通用生产力工具】任意长文本一键转公众号推文神器,支持将口语化聊天记录、素材草稿、会议纪要、读书笔记、行业分析、赛事复盘等所有非结构化内容,自动转换为结构清晰、排版规范、符合公众号阅读习惯的标准化推文,自动提炼核心观点、分层排版、生成合规提示,无需手动调整格式,10秒输出可直接发布的内容,大幅降低公众号...

0· 74·0 current·0 all-time
byninetyhe@ninetyhe-90

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for ninetyhe-90/stock-review-to-wechat-official.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "A股复盘转公众号格式工具" (ninetyhe-90/stock-review-to-wechat-official) from ClawHub.
Skill page: https://clawhub.ai/ninetyhe-90/stock-review-to-wechat-official
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install stock-review-to-wechat-official

ClawHub CLI

Package manager switcher

npx clawhub@latest install stock-review-to-wechat-official
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name and description (convert arbitrary text into WeChat/公众号-ready posts) align with the SKILL.md templates and formatting rules. The templates and processing rules are coherent for a content-generation tool.
!
Instruction Scope
The SKILL.md explicitly instructs the agent to '自动保存' generated articles to a hard-coded default path (/root/.hermes/hermes-agent/gzh/[日期]_[标题].md). The skill does not instruct asking for user consent before saving, nor does it mention filename collision handling, limiting write scope, or handling of sensitive content. That filesystem-write instruction extends the agent's runtime scope beyond pure text transformation and could overwrite or persist sensitive user data.
Install Mechanism
This is an instruction-only skill with no install steps or bundled code. No binaries or external packages are installed, which minimizes code-execution risk from installation.
!
Credentials
The skill declares no required env vars or config paths, yet the instructions reference an absolute path under /root/.hermes. This is an inconsistency: the skill implicitly requires filesystem write access to that location but did not declare it. The instruction to '100%保留原文所有核心实战观点' increases risk of persisting potentially sensitive or private content.
Persistence & Privilege
The skill does persist generated content to disk by default, but it does not request always:true or other elevated platform privileges. Persisting user-provided content is plausible for a content tool, yet the default path choice and lack of an explicit opt-in/consent step are noteworthy.
What to consider before installing
This skill appears to do what it says (format stock-review text into WeChat-article style) but its runtime instructions tell the agent to automatically save outputs to a hard-coded root path (/root/.hermes/...). Before installing or using it: 1) Confirm where outputs will be written and change the default path to a directory you control; do not accept /root locations. 2) Test with non-sensitive/dummy text first to see if files are created and whether filenames are overwritten. 3) Ask the skill author to declare required config paths or to prompt for a save location rather than using a hard-coded root path. 4) Avoid feeding private credentials, API keys, or sensitive company data because the skill explicitly preserves original core viewpoints and will persist them. If the author cannot clarify or remove the hard-coded path and automatic save behavior, consider using a version that only returns the generated text (no automatic file writes).

Like a lobster shell, security has layers — review code before you run it.

latestvk9731hjp7psc42tek3xgteagv185ds89
74downloads
0stars
3versions
Updated 4d ago
v1.2.0
MIT-0

触发场景

  • 用户发送任意口语化文本/聊天记录/素材草稿,需要生成公众号文章
  • 用户需要把结构化程度低的内容(会议纪要、读书笔记、行业分析等)快速整理为适合公众号发布的格式
  • 用户要求按照公众号标准排版优化现有文章内容

执行步骤

  1. 支持两种模板选择,自动适配用户需求:
    • 标准版结构(默认):
      • 标题:# 今日市场复盘:[当日核心特征,如普涨如期而至,算力租赁异军突起]
      • 一、盘面解读:提炼当日核心盘面特征,包括国家队/外资动向、指数表现、小票/大票风格切换
      • 二、板块轮动:分板块分析表现,核心逻辑,板块之间的压制/共振关系,重点标的分析
      • 三、情绪周期:龙头表现、高度压制突破情况、中位晋级率、情绪阶段判断
      • 四、连板梯队:按四进五/三进四/二进三/一进二的顺序分析各梯队核心标的的晋级逻辑、值得关注的方向
      • 五、竞价信息提取:提炼盘前竞价的核心信号,包括大单动向、产业链行为识别、板块强度预判
      • 六、全天总结:包括外围市场影响、成交量分析、资金动向、整体市场状态判断
      • 七、展望:后市/下一个交易日的操作建议、可能出现的新题材预判
      • 固定结尾:统一风险提示+引流话术
    • 优享版结构(逻辑更连贯,适合深度复盘号):
      • 标题:# [核心冲突点]:[关键结论,如光通信高潮分歧落地:从开盘加速看板块见顶信号]
      • 开篇总览:核心行情特征+当日预判验证情况,开门见山给出核心结论
      • 分模块拆解:盘面核心矛盾→主线板块博弈逻辑→情绪周期转折→连板梯队信号→竞价细节拆解→走势验证→后市策略,逻辑贯穿全文,可读性更强
      • 固定结尾:统一风险提示+引流话术
  2. 自动保存功能:生成后的文章自动保存到用户指定的公众号目录,默认路径:/root/.hermes/hermes-agent/gzh/[日期]_[标题].md
  3. 内容处理规则:
    • 100%保留原文所有核心实战观点、标的分析、周期规律、案例比喻,不得删减关键信息
    • 将口语化表达(如"GJD"、"逼着头铁"、"坑爹")转换为通顺的书面表达,但保持接地气的实战风格,避免生硬官方
    • 重点信息(核心结论、重要标的、风险提示)用加粗突出,增强可读性
    • 原文提到的历史规律、过往案例(如"合富周期"、"项羽刘邦比喻")需完整保留,增强内容连贯性
  4. 固定结尾模板:

    风险提示: 以上内容仅为个人复盘总结,不构成投资建议。股市有风险,投资需谨慎。

    如果觉得有帮助,欢迎点赞、在看、分享~
  5. 校验规则:生成后检查是否遗漏原文核心观点,结构是否完整,是否符合用户提供的历史样例风格

Comments

Loading comments...