stock-research-engine
v3.0.0个股基本面深度研究引擎。当用户输入股票代码、公司名称或要求分析某只股票时触发。覆盖A股、港股、美股。输出买方基金经理视角的投资分析简报，包含市场情绪、基本面、管理层评估、业务拆解、催化剂日历、风险提示和估值数据展示。任何涉及"帮我看看这个票"、"分析一下XXX"、"这个公司怎么样"、"XXX值不值得买"、股票代码...
⭐ 10· 3k·40 current·41 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The name/description (deep fundamental stock research across A/H/US markets) aligns with the SKILL.md: it prescribes a detailed research framework, sources, and a specific output format. The requested activities (multi‑source financial search, valuation dashboard, management/competitive analysis) are coherent with the stated purpose.
Instruction Scope
Runtime instructions are narrowly scoped to web/search-based data collection and structured analysis; they do not instruct the agent to read local files, environment variables, or modify system configuration. The SKILL.md emphasizes data provenance, cross-checking, and not fabricating data, which constrains agent behavior.
Install Mechanism
This is an instruction-only skill with no install spec and no code files — minimal on-disk risk. No downloads, package installs, or binary requirements are declared.
Credentials
The skill explicitly prioritizes data sources such as tushare/akshare and FMP and refers to structured APIs and data feeds. Some of these sources typically require API tokens, SDKs, or local packages (e.g., Tushare needs a token; FMP often requires a key). Yet the skill declares no required env vars, credentials, or config paths. That mismatch (expecting authenticated data sources but not declaring credentials or install steps) is the main incoherence.
Persistence & Privilege
always:false and no install behavior means the skill does not request persistent/privileged presence. The skill does not ask to modify other skills or system-wide settings; autonomous invocation is allowed by platform default but not combined with other red flags here.
What to consider before installing
This skill appears to be a legitimate, well-scoped stock research template, but it expects the agent to fetch data from named financial data providers (tushare/akshare, FMP, Yahoo Finance, company IR pages). Before installing, verify: 1) How will the agent access those sources — does your environment or agent have API keys/credentials (Tushare token, FMP key) or browser access? The skill doesn't declare required credentials. 2) If you must provide API keys, consider the sensitivity of those keys and whether you trust the skill/agent to use them only for this purpose. 3) Confirm whether the agent will use external browsing/tools (which may show paid content or require logins) and whether you are comfortable with that network access. 4) The skill produces investment analysis; ensure you understand legal/regulatory implications (investment advice) and confirm the expected disclaimer and limitations. If the publisher can clarify required credentials and how data access is performed (browser vs API vs installed SDK), that would raise confidence.Like a lobster shell, security has layers — review code before you run it.
latestvk975yk1az9vzm9twc9vfv15t9n82b06r
License
MIT-0
Free to use, modify, and redistribute. No attribution required.