ClawHub

A Share Stock Dossier

v1.0.0

Analyze A-share stocks and portfolios with analyst-grade, evidence-first reports. Use when the user asks for 个股分析、持仓复盘、逻辑是否还在、行业龙头、盘前/盘后策略、情绪+技术综合判断, especia...

⭐ 3· 974·7 current·7 all-time
byLian Junhong@t-atlas
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The name/description ask for A-share analysis and the skill includes a scraper/report workflow plus a helper script that fetches Eastmoney and Tencent market data — these are expected and proportionate to the stated purpose.
ℹ
Instruction Scope
SKILL.md instructs the agent to run the included Python snapshot script and to perform web_search/web_fetch/browser based evidence collection with a structured retrieval log. This stays within the purpose but does require the agent to perform broad web queries and page scraping (including JS-heavy pages), which is intrinsic to the declared 'deep web verification' goal.
✓
Install Mechanism
There is no install spec (instruction-only). The provided Python script has no third‑party dependencies and will be executed directly. This is low-risk; however, the skill metadata did not declare a required binary even though SKILL.md shows running 'python' — a minor metadata omission, not malicious behavior.
✓
Credentials
The skill requests no environment variables, credentials, or config paths. The script makes only outbound HTTP(S) calls to public Eastmoney and Tencent endpoints, which is consistent with its data-gathering purpose.
✓
Persistence & Privilege
always is false and the skill does not request persistent system-level privileges or modify other skills' configurations. Autonomous invocation is allowed by default but is not combined with other concerning privileges here.
Assessment
This skill appears internally consistent: it fetches market snapshots from Eastmoney and Tencent and instructs the agent to run a local Python script and to do web searches/scraping to build evidence-backed reports. Before installing, be aware that (1) the agent will make outbound web requests to public finance sites and search engines (so do not provide sensitive content you wouldn't want fetched), (2) the skill expects Python to be available though the metadata doesn't list it as a required binary, and (3) the agent will perform active web scraping/browser actions which may trigger site defenses. No credentials or secret environment variables are requested. If you need stricter guarantees, ask the author to declare 'python' as a required binary and to document any additional network endpoints the skill will contact.

Like a lobster shell, security has layers — review code before you run it.

latestvk9792e1ckyn0mwk517ckq9vbw582d39d

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments