Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

TradingAgents-CN 股票分析助手

v1.2.1

多智能体大语言模型金融交易分析助手。基于 TradingAgents-CN 框架,使用多个专业AI分析师协作分析股票(A股/港股/美股),生成投资建议和专业报告。 触发场景: - 用户说"分析某只股票"、"帮我看看茅台"、"股票怎么样" - 用户说"股票分析"、"投资建议"、"股票研究报告" - 用户提到股票代码...

0· 134·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for seantjs/tradingagents-cn-assistant.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "TradingAgents-CN 股票分析助手" (seantjs/tradingagents-cn-assistant) from ClawHub.
Skill page: https://clawhub.ai/seantjs/tradingagents-cn-assistant
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install tradingagents-cn-assistant

ClawHub CLI

Package manager switcher

npx clawhub@latest install tradingagents-cn-assistant
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description (multi‑agent stock analysis) matches the included scripts and documentation. However, the code hardcodes a Windows path (E:/TradingAgents-CN) and the SKILL.md uses a generic {PROJECT_DIR} placeholder — this mismatch is surprising and reduces portability. The skill's manifest declares no required env vars but the project clearly expects multiple LLM and data API keys.
Instruction Scope
SKILL.md instructs the agent/user to clone the upstream TradingAgents-CN repo, create a .env with API keys, and run python scripts — all expected for this purpose. A minor concern: the doc tells the AI to 'remember' the project path (persistent memory) and the scripts will load .env and call external LLM/data providers, which means user inputs and tickers will be sent to third‑party APIs. The instructions do not ask the agent to read unrelated system files, but they do rely on environment variables and local repo contents that are not declared in the skill metadata.
Install Mechanism
No install spec is present (instruction-only), so nothing is fetched automatically by the skill. The code recommends running 'pip install -r requirements.txt' which is normal for a Python project; the installer risk is left to the user and not automatic.
!
Credentials
The skill metadata lists no required environment variables, but SKILL.md, references/api-keys.md, check_env.py and analyze.py expect multiple API keys (DEEPSEEK_API_KEY, DASHSCOPE_API_KEY, OPENAI_API_KEY, GOOGLE_API_KEY, TUSHARE_TOKEN, FINNHUB_API_KEY, etc.) and even optional DB creds in examples. This mismatch (declared none vs required many) is a notable incoherence and increases the risk that secrets will be provided without the user realizing the skill needs them.
Persistence & Privilege
always:false and normal autonomous invocation settings. The only persistence-related text is a suggestion that the AI 'remember' the project path; the skill does not request system-wide config modifications or cross-skill privileges. No 'always:true' or other elevated flags are present.
What to consider before installing
Things to check before installing or running this skill: - Be aware the included scripts expect you to clone the upstream TradingAgents-CN repo into a local folder; the code hardcodes E:\/TradingAgents-CN which will fail on non‑Windows systems or if you choose a different path — inspect and adjust paths before running. - The skill metadata declares no required env vars, but the docs and scripts require multiple API keys (LLM providers and market data APIs). Only provide the minimum API keys you intend to use, and never commit your .env to git. - Running the scripts will send data (stock tickers, prompts, possibly snippets of reports) to third‑party LLM and data provider endpoints — do not include any private or sensitive information in prompts or configuration. - Because the skill is instruction-only and will instruct you to 'pip install -r requirements.txt', review requirements.txt and the cloned repository code before installing dependencies; run in an isolated environment (virtualenv/container) if possible. - The mismatches (no declared env vars, hardcoded path, vague 'AI will remember' note) suggest sloppy packaging rather than overt malice, but exercise caution: review the upstream TradingAgents-CN repository and the included scripts thoroughly before use. If you want, I can summarize the exact lines you should change (path and env handling) to make this safer and portable, or produce a checklist to run the scripts in a sandboxed environment.

Like a lobster shell, security has layers — review code before you run it.

latestvk976t4sq5gfcp8gs1gk19qnsyh83yktt
134downloads
0stars
4versions
Updated 3w ago
v1.2.1
MIT-0

TradingAgents-CN 股票分析助手

基于 hsliuping/TradingAgents-CN 的多智能体股票分析框架。

⚠️ 重要声明

本技能仅供学习研究用途,不构成任何投资建议。

  • 股票分析结果仅供参考,投资决策请咨询专业顾问
  • 模型分析可能存在偏差,请结合多方面信息判断
  • 使用本技能进行投资决策的风险由用户自行承担

一、前置条件

  1. 克隆 TradingAgents-CN 项目到本地,记录项目路径(下文用 {PROJECT_DIR} 表示)
    git clone https://github.com/hsliuping/TradingAgents-CN.git
    
  2. Python 环境:Python 3.10 - 3.13
  3. 已配置 API Key(见下方配置说明)

💡 首次使用时告诉 AI:"我的 TradingAgents-CN 项目路径是 [你的路径]",AI 会记住并自动使用。


二、配置说明

2.1 API Key 配置({PROJECT_DIR}/.env

# 硅基流动(推荐,支持国产模型)
SILICONFLOW_API_KEY=sk-your-key
SILICONFLOW_BASE_URL=https://api.siliconflow.cn/v1
SILICONFLOW_DEEP_THINK_MODEL=Qwen/Qwen3.5-4B
SILICONFLOW_QUICK_THINK_MODEL=Qwen/Qwen3.5-4B

# DeepSeek(成本低)
DEEPSEEK_API_KEY=sk-your-key
DEEPSEEK_BASE_URL=https://api.deepseek.com
DEEPSEEK_ENABLED=true

2.2 分析参数

参数默认值说明
max_debate_rounds1看涨/看跌辩论轮数
max_risk_discuss_rounds1风险管理辩论轮数
online_toolsfalse是否启用在线工具

三、完整分析流程(9步多智能体协作)

用户输入股票代码
        ↓
【第1步】数据获取层(AKShare 实时拉取)
        ↓
【第2步】5个分析师并行工作
  ├── 市场分析师       → 技术指标(MA/MACD/RSI/BOLL)
  ├── A股市场分析师    → A股专项(北向资金/板块/涨跌停)
  ├── 基本面分析师     → 财务数据(PE/PB/ROE/DCF)
  ├── 新闻分析师       → 舆情监控(公告/新闻/事件)
  └── 社交媒体分析师   → 情绪分析(论坛/社交媒体)
        ↓
【第3步】看涨研究员 ←→ 看跌研究员(多空辩论 N 轮)
  - 看涨研究员:构建增长潜力、竞争优势论证
  - 看跌研究员:构建风险挑战、负面指标论证
        ↓
【第4步】投资研究总监(综合判断)
  - 主持多空辩论,批判性评估双方论点
  - 输出:明确投资建议 + 目标价位区间 + 投资计划
        ↓
【第5步】交易员(具体交易决策)
  - 接收投资计划,结合四份分析报告
  - 输出:买入/持有/卖出 + 具体目标价 + 置信度 + 风险评分
        ↓
【第6步】激进/保守/中性风险分析师(三方风险辩论 N 轮)
  - 激进分析师:倡导高回报高风险策略
  - 保守分析师:强调风险缓解和稳健策略
  - 中性分析师:提供平衡视角,调和两端
        ↓
【第7步】风险管理总监(最终风险评估)
  - 综合三方辩论,完善交易员计划
  - 输出:最终风险调整后的投资建议
        ↓
【第8步】投资组合经理(最终决策)
  - 批判性评估全部辩论,做出最终承诺
  - 输出:明确的买入/持有/卖出 + 目标价格区间(保守/基准/乐观)
        ↓
【第9步】结果输出
  - 控制台打印完整分析报告
  - 可选:整理为 Markdown/Word/PDF 文档

四、执行方法

4.1 AI 助手触发(推荐)

直接告诉 AI 要分析的股票:

  • "分析 300339 润和软件"
  • "帮我看看 600519 贵州茅台"
  • "生成一份腾讯 0700.HK 的投资报告"

4.2 AI 执行时的标准命令

cd {PROJECT_DIR}
python analyze_simple.py {股票代码} {日期(可选)}

示例:

cd {PROJECT_DIR}
python analyze_simple.py 300339 2026-03-31

4.3 执行进度说明

AI 在执行时应向用户汇报当前进度,例如:

  • "正在运行第2步:5个分析师并行采集数据..."
  • "正在运行第3步:看涨/看跌研究员辩论中..."
  • "正在运行第4步:投资研究总监综合判断..."
  • "分析完成,正在整理报告..."

五、各角色职责速查

分析师层(第2步)

角色文件核心职责
市场分析师agents/analysts/market_analyst.pyMA/MACD/RSI/BOLL 技术指标
A股市场分析师agents/analysts/china_market_analyst.py北向资金、板块轮动、A股特色指标
基本面分析师agents/analysts/fundamentals_analyst.pyPE/PB/ROE/DCF 财务分析
新闻分析师agents/analysts/news_analyst.py公告、新闻、重大事件
社交媒体分析师agents/analysts/social_media_analyst.py论坛情绪、社交媒体舆情

研究辩论层(第3-4步)

角色文件核心职责
看涨研究员agents/researchers/bull_researcher.py构建多头论证,反驳空头
看跌研究员agents/researchers/bear_researcher.py构建空头论证,反驳多头
投资研究总监agents/managers/research_manager.py主持辩论,输出投资计划

交易执行层(第5步)

角色文件核心职责
交易员agents/trader/trader.py制定具体交易计划,强制给出目标价

风险管理层(第6-8步)

角色文件核心职责
激进风险分析师agents/risk_mgmt/aggresive_debator.py倡导高风险高回报
保守风险分析师agents/risk_mgmt/conservative_debator.py强调风险缓解稳健增长
中性风险分析师agents/risk_mgmt/neutral_debator.py平衡视角,调和两端
风险管理总监agents/managers/risk_manager.py综合风险辩论,完善交易计划
投资组合经理graph/trading_graph.py最终决策,输出目标价区间

六、输出报告结构

分析完成后,AI 应将控制台输出整理为以下结构:

# {公司名称}({股票代码})投资分析报告
> 分析日期:{日期}

## 一、市场技术分析
- 趋势判断:
- 关键价位:
- 技术指标信号:

## 二、基本面分析
- 估值水平(PE/PB):
- 盈利能力(ROE):
- 成长性:

## 三、消息面分析
- 近期重要公告:
- 行业动态:
- 风险事件:

## 四、情绪面分析
- 市场情绪:
- 社交媒体热度:

## 五、多空辩论摘要
- 看涨核心论点:
- 看跌核心论点:
- 研究总监判断:

## 六、风险评估
- 激进观点:
- 保守观点:
- 风险管理总监结论:

## 七、最终投资建议
- **投资评级**:买入 / 持有 / 卖出
- **目标价格**:
  - 保守目标:
  - 基准目标:
  - 乐观目标:
- **时间范围**:
- **置信度**:
- **风险评分**:
- **核心理由**:

七、股票代码格式

市场格式示例
A股6位数字600519, 000001, 300339
港股数字.HK0700.HK, 09988.HK
美股字母代码AAPL, NVDA, TSLA

八、已知问题与处理

问题说明处理方式
AKShare 网络抖动Connection aborted重试一次,通常自动恢复
Tushare Token 无效日志显示"您的token不对"忽略,不影响 AKShare 数据
MongoDB/Redis 无需安装命令行分析不需要数据库直接实时拉取,无需配置
Pydantic 警告Python 3.14 兼容性警告不影响功能,忽略即可
分析时间较长约 5-15 分钟正常现象,LLM 调用耗时

九、支持的 LLM 提供商

提供商推荐模型成本获取地址
硅基流动Qwen/Qwen3.5-4Bhttps://www.siliconflow.cn/
DeepSeekdeepseek-chat最低https://platform.deepseek.com/
通义千问qwen-plushttps://dashscope.aliyun.com/
OpenAIgpt-4ohttps://platform.openai.com/
Googlegemini-2.0-flashhttps://ai.google.dev/

项目信息

Comments

Loading comments...