美国市场政策查询Skill测试

提供基于DeepSeek v4的美国市场政策、法规及投资环境的智能查询与多语言分析服务。

Security Scan

The skill appears to be a local/demo implementation that claims DeepSeek v4 integration and live data sources but the shipped code is mocked and does not actually use external services or credentials — this mismatch is suspicious (likely a stub), so verify intent before trusting or supplying API keys.

Purpose & Capability

The name/description claim "DeepSeek v4驱动" and live data-source collection, but the bundled code (index.js) contains only simulated/local data and no calls to DeepSeek, network requests, or external APIs. Claiming DeepSeek compatibility in metadata (package.json) without dependencies or implementation is misleading.

Instruction Scope

SKILL.md and README instruct configuring data sources and using environment variables for API keys, but the runtime instructions and index.js do not actually read or require any env vars or perform external requests — the runtime behavior is limited to local, simulated responses. The instructions therefore overstate the agent's actual runtime actions.

Install Mechanism

There is no install spec and no external downloads; package.json has no dependencies. The skill is distributed as source files (index.js, README, SKILL.md, test.js) and thus has low install-time risk.

Credentials

The declared requirements list no environment variables or credentials. The docs recommend using env vars for API keys, but the code does not require or access any credentials — requests for secrets are not present in the actual codebase.

Persistence & Privilege

Skill does not request elevated persistence (always:false). It does not modify other skills or system settings and contains no install hooks that alter agent configuration.

What to consider before installing

This package looks like a demo/stub rather than a fully implemented DeepSeek-backed skill. Before installing or providing API keys: 1) Treat it as local/sandbox code — it currently does not call external services. 2) If you expect real DeepSeek or data-source integration, request or inspect an implementation that makes explicit network calls to trusted endpoints and documents which credentials are needed. 3) Do not supply real API keys to this skill until you verify the code reads them and connects to the intended services (and confirm the endpoints are legitimate). 4) Run the tests in an isolated environment (or review runtime code) to ensure no unexpected network activity occurs. If the author intends this to be a placeholder, ask them to remove misleading claims about DeepSeek v4 in the description or implement the integration transparently.

美国市场政策查询Skill

🚀 概述

基于DeepSeek v4的智能政策分析系统，提供美国市场政策、法规、投资环境的智能查询和分析。

🌟 核心亮点

• DeepSeek v4驱动：利用最新AI模型进行智能政策分析和预测
• 惠迈智能体协作：基于惠迈三层智能体架构，确保数据准确性和实时性
• 多语言支持：支持中文、英文等多种语言
• 数据源可配置：灵活配置不同数据源，适应各种业务需求

🔧 技术特性

多语言支持

• 中文（简体）
• 英文（美国）
• 自动语言检测和切换

数据源配置

{
  dataSources: {
    investment: '[请替换为您的美国投资政策数据源]',
    trade: '[请替换为您的美国贸易法规数据源]',
    // ... 其他数据源
  }
}

📦 安装

# 通过ClawHub安装
clawhub install usa-policy-query

# 或手动安装
npm install usa-policy-query

🔒 安全使用指南

1. 数据源配置：使用环境变量管理敏感数据源信息
2. API密钥：不要将真实API密钥写入代码
3. 权限控制：为数据源配置最小必要权限

支持

如有问题，请提交Issue或联系维护团队。

---

惠迈智能体：让全球业务变得简单