美国市场政策查询Skill

提供基于惠迈智能体架构的美国市场政策、法规及投资环境的多语言智能查询与分析服务。

Security Scan

The skill is internally coherent and implements a local, simulated US policy query/analysis helper; it does not request secrets or install external code, though its README/package metadata overstate integrations (DeepSeek / 惠迈) that the shipped code does not implement.

Purpose & Capability

The name/description (US market policy queries, multi-language, configurable data sources) match the provided code: index.js implements query, analysis, language switching, and caching. However, README and package.json claim integration with DeepSeek v4 and a 惠迈 multi-agent architecture while the actual code contains no network/model integrations or dependencies — it returns simulated policy data from local functions. This is an overclaim (misleading) but not evidence of malicious behavior.

Instruction Scope

SKILL.md contains ordinary installation and configuration guidance and recommends using environment variables for API keys. The runtime instructions do not ask the agent to read unrelated system files, credentials, or transmit data to unknown endpoints. The code likewise performs no file I/O or network calls.

Install Mechanism

No install spec is provided (instruction-only skill), and the package contains only small JS files with no dependencies. There are no download URLs or extract steps, so installation risk is low.

Credentials

Metadata declares no required environment variables or credentials (none requested). README and examples suggest using environment variables like INVESTMENT_API_KEY / TRADE_API_KEY if integrating real data sources — that is reasonable, but optional. Be aware the current shipped code does not actually read those env vars; if you later configure dataSources to call external services you will need to provide credentials.

Persistence & Privilege

The skill does not request persistent/always-on privileges (always:false) and does not modify other skills or system configuration. Autonomous invocation settings are default and not by themselves concerning.

Assessment

This skill appears to be a small, local implementation that simulates policy queries and analysis; it does not currently make network calls or ask for secrets. Two things to consider before installing or using it in production: (1) The README and package metadata claim DeepSeek / 惠迈 integrations that the code does not implement — treat those claims as marketing unless you see code that performs those integrations. (2) If you replace the placeholder dataSources with real APIs, you'll need to supply API keys or endpoints — only provide secrets to well-reviewed code and trusted sources. Because the skill's source/homepage are unknown, prefer running it in an isolated environment and review/modify the code yourself before supplying any credentials or connecting it to external data sources.

🚀 概述

基于惠迈智能体三层架构的政策查询框架，提供美国市场政策、法规、投资环境的智能查询和分析。

🌟 核心亮点

• 惠迈智能体协作：基于惠迈三层智能体架构，支持多源数据整合
• 惠迈智能体协作：基于惠迈三层智能体架构，确保数据准确性和实时性
• 多语言支持：支持中文、英文等多种语言
• 数据源可配置：灵活配置不同数据源，适应各种业务需求

🔧 技术特性

多语言支持

• 中文（简体）
• 英文（美国）
• 自动语言检测和切换

数据源配置

{
  dataSources: {
    investment: '[请替换为您的美国投资政策数据源]',
    trade: '[请替换为您的美国贸易法规数据源]',
    // ... 其他数据源
  }
}

📦 安装

# 通过ClawHub安装
clawhub install usa-policy-query

# 或手动安装
npm install usa-policy-query

🔒 安全使用指南

1. 数据源配置：使用环境变量管理敏感数据源信息
2. API密钥：不要将真实API密钥写入代码
3. 权限控制：为数据源配置最小必要权限

支持

如有问题，请提交Issue或联系维护团队。

---

惠迈智能体：让全球业务变得简单