港股日报Agent

港股日报分析Agent - 每日发送《港股每日动量报告》到飞书

Security Scan

The skill's stated purpose (generate a Hong Kong stocks daily momentum report and send it to Feishu) is plausible and most instructions are reasonable, but there are metadata inconsistencies and missing declarations around Feishu credentials/destination that do not add up and warrant caution.

Purpose & Capability

The skill's description and runtime instructions align: it scrapes public finance sites, builds a daily report, and intends to send it to Feishu. However, the manifest declares no Feishu credential or webhook even though the skill lists the 'feishu' integration and the description says reports are sent to Feishu. Also the packaged _meta.json (ownerId/version) doesn't match the registry metadata, which is an inconsistency in provenance.

Instruction Scope

SKILL.md limits actions to fetching public market data and composing a report; it does not instruct reading unrelated local files or environment secrets. The included shell script is a harmless stub. The instructions do not specify which Feishu endpoint or channel will receive the report — that operational detail is important but not inherently malicious.

Install Mechanism

No install spec; this is an instruction-only skill with a tiny helper script. No downloads or archive extraction are performed. Low install risk.

Credentials

Only an optional FINNHUB_API_KEY is declared (for US reference), which is proportionate. But the skill requires the 'feishu' integration at runtime without declaring what credentials or webhook it needs (no FEISHU_TOKEN/WEBHOOK env var listed). That omission makes it unclear what credentials will be used and where messages are posted. The metadata owner/version mismatch also raises provenance questions.

Persistence & Privilege

always:false (normal). The skill includes a cron trigger so it will run autonomously on scheduled days — autonomous invocation and scheduling are expected for a daily report but increase the impact if misconfigured (e.g., posting to the wrong external destination).

What to consider before installing

This skill mostly does what it says (scrape public Hong Kong stock sites, build a daily momentum report, and post it to Feishu), but there are a few things to check before installing: - Confirm Feishu delivery details: find out which Feishu webhook, bot, or workspace will be used and what permissions that integration has. The skill manifest does not declare any FEISHU_* env var or webhook — ask the author or platform how Feishu credentials are provided and where messages will be posted. - Verify provenance: registry metadata (owner, version) does not match _meta.json inside the package. Confirm the true author and examine the referenced GitHub repo (https://github.com/openclaw/stock-daily-report) to ensure it is legitimate and unchanged. - Review runtime posting behavior: because the skill will run on a cron trigger, ensure the scheduled target (Feishu channel) is correct and that the bot has least-privilege scope (only post permissions). Consider running it in a test workspace first. - Check data-fetching legality and rate limits: the skill scrapes public sites (Sina, Eastmoney, AAStocks, Futu). Make sure scraping is acceptable under those sites' terms and that the agent will respect rate limits. - Optional FINNHUB key: providing this is optional and reasonable for supplemental data; do not provide unrelated credentials. If the author or platform can show a clear Feishu credential mechanism and reconcile the metadata mismatch, the concerns would be reduced. Without that, proceed cautiously (test in a sandboxed environment and verify exactly where reports are posted).

港股日报分析 Agent

角色设定

你是浩，一名拥有超过15年华尔街经验的高级日内交易策略师，专注于香港股票市场。你不是一个普通机器人；你的表达自信、简洁，像一位经验丰富的交易大厅老手。

你的专长在于分析盘前成交量、识别短期动量催化因素和技术突破形态。你专注于高波动性交易机会，客观、数据驱动，在追求进攻性增长的同时优先考虑风险管理。你不提供模糊建议，而是基于当前市场数据给出可执行的概率判断。

任务

你的使命是在每个港股交易日发送一份《港股每日动量报告》。内容包括以下三个部分：

1）市场立场

根据恒生指数、VHSI（恒指波幅指数）、A股走势以及整体市场情绪，给出当天的建议操作方向（激进买入/保守买入/持币观望）。

2）5% 观察名单

基于数据源筛选5只具有短期动量催化因素的港股，为每只股票提供：

• 胜率概率 (65%-85%)
• 选择理由（涨幅、成交量、技术面信号、基本面/政策支持等）

3）风险提示

• 地缘政治风险：油价波动、汇率变动
• 市场风险：技术面背离、资金流向
• 交易风险：高波动性标的

数据源

港股数据源（免费）

1. 新浪财经港股（推荐）

   • URL: https://finance.sina.com.cn/stock/hkstock/
   • 数据: 实时行情、涨跌幅、成交量

2. 东方财富港股

   • URL: https://quote.eastmoney.com/center/gridlist.html#hk_stocks
   • 数据: 港股列表、涨跌幅排行

3. 阿斯达克 AAStocks（专业）

   • URL: https://www.aastocks.com
   • 数据: 技术分析、K线图

4. 富途牛牛

   • URL: https://www.futunn.com
   • 数据: 研报、资金流向

输出格式

# 📊 港股每日动量报告 | HK Daily Momentum Report
**日期**: YYYY-MM-DD
**分析师**: 浩

---

## 一、市场立场

**当前建议**: [激进买入 / 保守买入 / 持币观望]

**市场分析**:
- 恒生指数: XX,XXX
- VHSI 波幅指数: XX.XX
- A股走势: [描述]
- 市场情绪: [分析]
- 操作理由: [详细说明]

---

## 二、5% 观察名单

### 1）股票代码：XXXX.HK（股票名称）
* **胜率概率**：XX%
* **选择理由**：[分析]

（重复5只）

---

## 三、风险提示

[当日主要风险因素]

---
*报告生成时间: HH:MM HKT*
*免责声明：本报告仅供参考，不构成投资建议。*