Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

A股股票交易助手

v2.0.0

A股股票分析助手。支持实时股价查询、批量查询、财经新闻、潜力股分析、行业资金流向、龙头股分析、消息面情感分析、激进型模拟交易。触发场景:(1) 查询股票实时价格 (2) 分析消息面预测走势 (3) 行业资金+龙头分析 (4) 激进型模拟交易 (5) 制定买卖策略。

0· 418·5 current·5 all-time
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description match the included scripts: price queries, news/sentiment analysis, sector/fund-flow analysis, batch queries and a simulated aggressive trading strategy. Network requests go to public financial endpoints (qt.gtimg.cn, finance.sina.com.cn, EastMoney), which is expected for real-time data. The only slightly surprising capability is the ability to schedule platform cron jobs and send alerts (set_alert.py) — this is related to the advertised 'price monitor' feature but elevates the skill from passive analysis to active platform interaction.
!
Instruction Scope
SKILL.md instructs running the included scripts only, which is accurate. However, set_alert.py constructs and invokes an 'openclaw cron add' command to create scheduled jobs that will run in the OpenClaw environment and target a channel 'qqbot' and a hard-coded user_id. That creates persistent external-visible actions (announcements/messages) without prompting for explicit consent in SKILL.md. simulate_trading.py writes/reads a trading record under /root/.openclaw/... — acceptable for a skill but notable as it modifies platform state.
Install Mechanism
No install specification; the skill is instruction+scripts only and does not download or extract external archives. That minimizes install-time risk.
Credentials
The skill requests no environment variables or credentials, which is consistent. It does hard-code an OpenClaw target user id (D3AA9A40183306D5A885AB9BE7581B06) and a channel name ('qqbot') in set_alert.py; this is not secret-exfiltrating but is an implicit requirement/assumption about the runtime environment (presence of openclaw CLI, available channel and user). It also assumes write access to the skill workspace path.
!
Persistence & Privilege
While 'always' is false, set_alert.py calls the OpenClaw CLI to add a cron job (--cron 0 16 * * 1-5) that will persist platform-side and announce messages. This grants the skill the ability to create scheduled/persistent actions in the platform and to target a (hard-coded) recipient/channel. That persistent behavior and cross-component messaging is beyond simple read-only analysis and should be considered a privilege escalation risk if you don't expect persistence.
What to consider before installing
This skill's analysis and query scripts are coherent with its description and mostly safe to inspect or run in a sandbox. Before installing or enabling it broadly, review and decide about two behaviors: (1) set_alert.py will call the 'openclaw' CLI to create a scheduled job that announces messages to channel 'qqbot' and a hard-coded user ID — if you don't want the skill to create persistent scheduled tasks or message external recipients, remove or modify that code and the default user_id; (2) simulate_trading.py writes a trading_record.json to /root/.openclaw/... — confirm this path and storage policy are acceptable in your environment. Also consider running the scripts in an isolated environment first (no production credentials), verify the endpoints contacted (qt.gtimg.cn, finance.sina.com.cn, EastMoney) are acceptable, and audit/limit network access if needed. If you lack trust in the unknown source, avoid enabling the cron/announcement functionality or strip out openclaw CLI invocations before use.

Like a lobster shell, security has layers — review code before you run it.

latestvk97ftk36sxsv6b2bmc4d7nv32d82mj6h
418downloads
0stars
11versions
Updated 22h ago
v2.0.0
MIT-0

Stock Trader - A股投资助手

🚀 快速开始

1. 查询单只股票

python scripts/get_price.py <股票代码>

2. 消息面分析 + 走势预测

python scripts/analyze_sentiment.py <股票代码>

3. 激进型模拟交易 ⭐⭐⭐

# 启动模拟交易
python scripts/simulate_trading.py

# 查看交易报告
python scripts/simulate_trading.py report

# 每日收盘报告
python scripts/simulate_trading.py daily

# 重置账户
python scripts/simulate_trading.py reset

策略配置:

  • 💰 初始资金:5万元
  • 📈 风格:激进型(高仓位、追涨杀跌、快进快出)
  • 🔥 特点:追强势股(>5%涨幅),果断割肉(<-3%止损)
  • ⏰ 每日收盘自动输出收益报告

4. 资金流入行业 + 龙头股分析

python scripts/analyze_fund_flow.py

5. 单独分析行业龙头股

python scripts/analyze_leaders.py <行业名称>

6. 其他功能

python scripts/analyze_potential.py    # 潜力股分析
python scripts/batch_query.py          # 批量查询
python scripts/get_news.py             # 财经新闻

📈 股票代码规则

市场前缀示例
深圳主板szsz000001
深圳创业板szsz300750
上海主板shsh600519
上海科创板shsh688981

📊 功能一览

功能命令说明
🎮 模拟交易simulate_trading.py激进型策略模拟炒股 ⭐⭐⭐
📰 消息面分析analyze_sentiment.py新闻情感+走势预测
💰 资金+龙头股analyze_fund_flow.py资金流入行业+龙头股
🏆 行业龙头analyze_leaders.py指定行业龙头分析
🔥 潜力股analyze_potential.pyTOP10潜力股
📰 财经新闻get_news.py新浪财经要闻
📊 股价查询get_price.py实时股价
📈 批量查询batch_query.py多股票同时查
⏰ 价格监控set_alert.py到价提醒

🎮 模拟交易详解

激进型策略特点

💰 初始资金: 50,000元
📊 仓位管理: 高仓位运行(8-9成)
🔥 追涨策略: 涨幅>5%的强势股
📉 杀跌策略: 亏损>-3%果断割肉
⚡ 交易风格: 短线为主,快进快出

使用方法

# 1. 初始化账户
python scripts/simulate_trading.py reset

# 2. 每日查看交易建议
python scripts/simulate_trading.py

# 3. 收盘后查看收益报告
python scripts/simulate_trading.py daily

输出示例

📈 每日收盘报告 - 2026-03-10
💰 资产情况:
  现金: 50000.00元
  持仓: 0.00元 (0只)
  总资产: 50000.00元
  总收益: +0.00元 (+0.00%)

💰 买卖策略模板

激进型策略

仓位: 保持8-9成高仓位
追涨: 强势股涨幅>5%时追入
杀跌: 亏损>-3%时果断止损
止盈: 盈利>15%时分批止盈

消息面策略

强烈看多 + 技术面突破 → 考虑加仓
偏空 + 技术面走弱 → 考虑减仓
中性 + 震荡行情 → 观望为主

⚠️ 风险提示

  • 所有分析仅供参考,不构成投资建议
  • 股市有风险,投资需谨慎
  • 模拟交易仅供参考学习,不代表真实收益
  • 激进型策略风险较高,需严格执行止损
  • 建议分散投资,控制单只股票仓位不超过20%
  • 严格执行止损,保护本金安全

📦 版本更新

v1.5.0 - 重磅新功能:

  • 🎮 激进型模拟交易功能
  • 💰 初始资金5万元
  • ⚡ 追涨杀跌策略
  • 📈 每日收盘收益报告

v1.4.1 - 新增功能:

  • 📰 股票消息面分析 + 情感评分
  • 🎯 基于消息面的股价走势预测

v1.3.0 - 新增功能:

  • 💰 行业资金流向 + 龙头股综合分析

v1.2.0 - 新增功能:

  • 行业主力资金流向分析

v1.1.0 - 新增功能:

  • 财经新闻获取
  • 潜力股自动分析

v1.0.0 - 首发:

  • 实时股价查询
  • 批量查询
  • 价格监控提醒

Comments

Loading comments...