US Stock Valuation Model - Value Investing Framework / 美股估值模型-价值投资框架
v1.1.0Structured bilingual framework to evaluate US stocks by quality, moat, management, valuation, and risk for buy/watch/avoid decisions and monitoring.
⭐ 1· 2.4k·33 current·34 all-time
byLi Xin@spyfree
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (value-investing framework) matches the provided files: an evaluation script, an input template, and guidance. The skill does not request unrelated credentials or binaries. Minor note: SKILL.md shows a 'python3' command to run the bundled script but the registry metadata lists no required binaries — practically you must have Python 3 available to run the script.
Instruction Scope
Runtime instructions are limited to reading a local JSON input, running the bundled deterministic evaluator, and writing JSON/markdown outputs. The SKILL.md and script only reference local paths in the repository and do not access environment variables, network endpoints, or other system configuration.
Install Mechanism
No install spec (instruction-only plus a bundled script). Nothing is downloaded or installed by the skill; risk is low. The included Python script is plain text and not obfuscated.
Credentials
The skill requests no environment variables, credentials, or config paths. The script operates solely on the input JSON and produces output files. There are no unexplained secret/token requests.
Persistence & Privilege
Skill does not request always:true and does not modify other skills or system-wide settings. It writes only to the output paths you supply when running the script (e.g., .state/eval.json/.md).
Assessment
This skill appears to do exactly what it says: a deterministic local evaluator for US stocks. Before running, ensure you have Python 3 installed (the SKILL.md runs `python3` but required binaries are not declared). Inspect or run the bundled script locally with a copy of your input JSON to confirm behavior. Because the script writes to whatever output path you provide, avoid pointing it at sensitive system paths. The skill does not use network calls or ask for credentials, so it won't exfiltrate secrets as-is — but always review third-party code before executing it in production environments.Like a lobster shell, security has layers — review code before you run it.
financevk9704976kmf37apqr3k0fjcbq181n1g6investingvk97a7p5kghern98071tms6cxy981nceglatestvk9704976kmf37apqr3k0fjcbq181n1g6us-stocksvk9704976kmf37apqr3k0fjcbq181n1g6valuation-modelvk9704976kmf37apqr3k0fjcbq181n1g6value-investingvk9704976kmf37apqr3k0fjcbq181n1g6
License
MIT-0
Free to use, modify, and redistribute. No attribution required.