akshare-stock
v1.0.0A股量化数据分析工具，基于AkShare库获取A股行情、财务数据、板块信息等。用于回答关于A股股票查询、行情数据、财务分析、选股等问题。
⭐ 11· 7.7k·60 current·63 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the provided code and SKILL.md: the skill calls AkShare APIs to fetch A‑share quotes, K‑lines, financials, boards, fund flows, etc. There are no unrelated binaries, env vars, or config paths requested. Minor metadata mismatch (_meta.json owner/version differs from registry metadata) is present but does not change functionality.
Instruction Scope
SKILL.md only instructs installing AkShare (and optionally Baostock) and shows examples that call AkShare functions; it does not ask the agent to read unrelated files or credentials or to send data to unknown endpoints. Implementation issues: scripts/stock_cli.py has a bug—get_fund_flow calls stock_individual_fund_flow without the ak. prefix (NameError at runtime), and some pandas string-operations may raise exceptions on unexpected types. These are functional bugs, not evidence of scope creep or exfiltration.
Install Mechanism
There is no formal install spec (instruction-only), which is low risk. SKILL.md recommends 'pip install akshare' (and baostock fallback). Installing packages from PyPI executes third-party code and performs network I/O; AkShare is a known project but users should verify package source/version before installing in production.
Credentials
The skill requests no environment variables, credentials, or privileged config paths. AkShare will make network requests to public data sources to fetch market data, which is expected for this purpose and requires no secrets.
Persistence & Privilege
Flags show always:false and normal autonomous invocation allowed. The skill does not request permanent presence or modify other skills or system-wide settings.
Assessment
This skill appears to do what it claims: it fetches A‑share data via AkShare and asks for no credentials. Before installing or using it: 1) test the script locally in an isolated environment (virtualenv/container) because it performs network I/O and the SKILL.md warns about network issues; 2) verify the AkShare/Baostock package(s) and versions you install (pip installs run third-party code); 3) fix the small bug in scripts/stock_cli.py (undefined reference to stock_individual_fund_flow) before relying on the tool; 4) if you need to run in production, review AkShare's data sources and privacy/security implications (it will query external endpoints to retrieve market data). Overall the package is coherent and does not ask for unrelated privileges or secrets.Like a lobster shell, security has layers — review code before you run it.
latestvk97a1xh42d9yrn5j6zqznx2ffn826ka4
License
MIT-0
Free to use, modify, and redistribute. No attribution required.