财经新闻深度分析技能
ReviewAudited by ClawScan on May 10, 2026.
Overview
No credential theft or destructive behavior is shown, but the skill should be reviewed because its finance-advice claims and visible placeholder fetching code could make users over-trust incomplete analysis.
Review before installing. Use it as informational research only, verify original links and source counts, do not rely on it for trades, enable cron jobs only intentionally, and avoid entering sensitive portfolio details unless you are comfortable with local storage.
Findings (6)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A user could rely on a report that appears data-driven but may not actually have fetched the claimed sources.
The visible core fetchers are placeholders or empty, while the skill is presented as a professional 12+ source finance-news analyzer. In an investment context, unsupported or incomplete data collection can cause users to over-trust generated reports.
def fetch_cls_news(...): ... # 这里返回模拟数据结构 ... return news_list ... def fetch_wallstreet_news(...): ... return news_list ... # ... 其他源 ... return []
Verify that all fetchers are implemented before relying on outputs; require explicit source counts, timestamps, and clear no-data warnings, and do not let the agent fill gaps with guesses.
Users may treat the output as personalized investment advice even though the skill says it is informational.
The documentation both disclaims stock recommendations and advertises action-oriented investment guidance, which can blur the boundary between informational analysis and financial advice.
专业级财经新闻聚合与分析，为投资决策提供信息优势 ... 投资建议 ... 谨慎/关注/回避 ... 不荐股: 只提供信息，不做买卖建议
Treat results as research only, verify against original sources, and avoid making trades solely from this skill’s recommendations.
The agent may contact multiple public finance sites and ingest page content when the skill is used.
The skill expects browser/API access to external websites. This is central to its purpose, but fetched web content should be treated as untrusted input.
选择数据源（默认 12 源） → 并行抓取（浏览器/API） ... browser.open(url="https://www.cls.cn/telegraph")
Use only sources you trust, keep original links in the report, and verify major claims with multiple sources.
The skill may keep running on a schedule and producing reports until the cron job is removed.
The documentation includes user-directed cron setup for recurring briefings. This is disclosed and scoped, but it creates persistent automated activity if the user enables it.
openclaw cron add --name "财经早报" --schedule "0 8 * * 1-5" --payload "systemEvent:finance-news --brief"
Only add scheduled jobs intentionally, document how to disable them, and review generated reports before acting on them.
Local files may reveal watched stocks, generated reports, or portfolio-like information, and stale cached data may affect future briefings.
The skill stores reports and raw-data caches locally and advertises portfolio tracking. This is purpose-aligned, but stored financial interests or holdings can be sensitive and cached content can influence later analysis.
finance-news/ ├── reports/ # 简报存档 ├── cache/ # 原始数据缓存 ... openclaw finance-news --portfolio-add "宁德时代 1000 股"
Avoid entering sensitive holdings unless needed, keep storage paths private, and provide or use a clear cache/report cleanup process.
Users have less provenance information for deciding whether to trust the skill publisher.
The artifacts are visible, but the upstream provenance is limited. There is no automatic remote installer shown, so this is a review note rather than a security concern.
Source: unknown; Homepage: none; No install spec — this is an instruction-only skill.
Review the included files before use and install any optional dependencies manually from trusted sources.