Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

A股量化选股助手

v1.0.0

A股智能量化选股助手(禹锋量化 · 专业版)。当用户询问A股选股、股票推荐、 今日买什么股票、量化选股、短线机会、强势股、涨停股分析、个股技术分析、 主力资金流向、择时建议时触发此技能。 Use when: A股选股、今天买什么、推荐股票、短线股票、强势股筛选、量化筛选、 技术分析、主力资金、买卖点分析、择时评分...

0· 113·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for wsy0303/yufeng-stock-screener.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "A股量化选股助手" (wsy0303/yufeng-stock-screener) from ClawHub.
Skill page: https://clawhub.ai/wsy0303/yufeng-stock-screener
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install yufeng-stock-screener

ClawHub CLI

Package manager switcher

npx clawhub@latest install yufeng-stock-screener
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description (A股量化选股) match the included code and instructions: the skill runs a client script that calls a remote '禹锋量化' API to screen/analyze A‑share stocks. The required functionality (API token + HTTP requests) is coherent with the stated purpose.
!
Instruction Scope
SKILL.md instructs the agent to run scripts/query_stocks.py which will send your token and query parameters to a remote API. It also instructs users to obtain a paid token from a server reachable at http://124.220.59.85:8080. The instructions direct storing the token in ~/.bashrc. The combination of sending sensitive tokens and guiding users to a raw IP address is outside normal benign detail and deserves review.
Install Mechanism
There is no package manager install; install.sh (bundled) runs pip install requests, creates ~/.workbuddy/skills/... and copies files. This is a simple installer, but it writes to the user's home and shell rc. The installer copies from a relative ../skill/ path which may fail if packaging layout differs — not dangerous but brittle.
!
Credentials
The runtime expects an API token (YUFENG_QUANT_TOKEN) and optionally YUFENG_QUANT_API, but the registry metadata lists no required env vars. The script will send the token as X-Token to an external host (defaulting to http://124.220.59.85:8080). Requiring a single service token is proportionate to the feature, but the metadata omission and the use of a raw IP endpoint raise red flags about transparency and trust.
Persistence & Privilege
Installer appends an export line to ~/.bashrc when the user provides a token — this is a persistent change to the user's shell environment. The skill is not marked always:true and does not modify other skills or system-wide agent settings, so persistence is limited to files under the user's home directory and shell rc.
What to consider before installing
Before installing, verify the API host and token flow: 1) Confirm you trust the server at 124.220.59.85 (the skill defaults to that raw IP) — prefer an HTTPS, named domain and official documentation; 2) Do not paste your production tokens until you verify the service; consider using a throwaway token first; 3) Inspect scripts/query_stocks.py yourself (it is readable) to confirm only expected fields are sent; 4) Be aware install.sh will append your token to ~/.bashrc if you provide it — remove that line if you prefer not to persist the token; 5) If uncertain, run the client in a sandbox or container and/or ask the author for an official domain and privacy policy before using with real credentials.

Like a lobster shell, security has layers — review code before you run it.

latestvk97ajfjx9aypprxg7a8hgsc7wn849yce
113downloads
0stars
1versions
Updated 3w ago
v1.0.0
MIT-0

📈 A股量化选股助手(禹锋量化 · 专业版)

技能简介

本技能调用「禹锋量化」云端引擎,基于以下四维评分体系自动筛选 A 股短线机会:

维度权重核心指标
技术面40%均线/MACD/KDJ/RSI/放量/底部形态
资金面25%主力净流入/大单/板块资金
筹码面15%筹码胜率/成本分布
板块轮动20%行业资金强弱/轮动信号

附加特性:8日加权择时系统(价格强度/量能配合/均线位置/波动质量)


When to Run

  • 用户询问"今天买什么股票"、"推荐几只强势股"
  • 用户要求"量化选股"、"技术分析"、"短线机会"
  • 用户询问某只个股的买卖建议
  • 用户想了解当前市场热门板块和资金流向

Workflow

第一步:Token 验证

运行 scripts/query_stocks.py 前,检查用户是否提供了 API Token:

  • 如果用户已配置 YUFENG_QUANT_TOKEN 环境变量,直接使用
  • 如果没有,引导用户获取 Token(见下方"获取 Token"说明)

第二步:调用选股 API

python3 ~/.workbuddy/skills/a-stock-quant-screener/scripts/query_stocks.py \
  --action screen \
  --token "$YUFENG_QUANT_TOKEN"

支持的 action 类型:

  • screen — 今日选股(返回 TOP5 推荐)
  • analyze --code 000001.SZ — 个股分析
  • sector — 热门板块资金流向
  • timing --code 000001.SZ — 个股择时评分

第三步:格式化输出

将 API 返回的 JSON 按照以下模板格式化输出:

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
📊 禹锋量化 · A股今日精选 [日期]
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

🏆 TOP1  股票名称(代码)
├─ 综合评分:XX分  择时:🟢 重仓/买入
├─ 现价:X.XX元  涨跌:+X.X%
├─ 💰 建议买入区间:X.XX ~ X.XX元
├─ 🎯 目标止盈:X.XX元(+7%)
├─ 🛡️ 止损价位:X.XX元(-4%)
├─ 技术面:[关键信号描述]
└─ 选股理由:[3条核心理由]

[TOP2-5 同格式...]

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
⚠️ 风险提示:本结果仅供参考,不构成投资建议
   剩余调用次数:XX次 | 有效期至:XXXX-XX-XX
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

获取 Token(付费订阅)

访问 http://124.220.59.85:8080 或扫码购买 Token:

套餐价格调用次数有效期
体验版¥9.910次30天
标准版¥29.950次30天
专业版¥88200次90天
年度版¥199无限次365天

购买后将 Token 配置到环境变量:

# 添加到 ~/.bashrc 或 ~/.zshrc
export YUFENG_QUANT_TOKEN="your-token-here"

注意事项

  • 本技能适合 3-5天短线操作,不适合长线价值投资
  • 建议回避市值 50 亿以下小微盘股
  • 每次选股结果消耗 1 个 Token,个股分析消耗 1 个 Token
  • 数据更新时间:每个交易日 08:00(早盘前)

Comments

Loading comments...