by 安全扫描
OpenClaw
安全
medium confidenceThe skill is an instruction-only A‑share event analysis helper whose requirements, instructions, and outputs align with its stated purpose, but it depends on external scripts (cn-stock-data) that are not included — review those before trusting execution.
评估建议
This skill appears coherent and focused on event-driven stock analysis. Before installing or enabling it: (1) Verify the referenced cn-stock-data scripts ($SKILLS_ROOT/cn-stock-data/scripts/cn_stock_data.py) exist and inspect their code for network access, credential use, or file I/O you don't expect — the skill instructs the agent to run those scripts but does not include them. (2) Confirm that web searches and any market-data access comply with your data policies and licensing. (3) Be aware th...详细分析 ▾
✓ 用途与能力
Name/description (A股事件驱动分析、公告解读、政策影响评估) match the instructions: get announcement/policy text, perform quantitative/qualitative impact assessment, and fetch market/financial data. Requested artifacts (web search + cn-stock-data script calls) are coherent with the stated purpose.
ℹ 指令范围
Instructions are focused on event analysis and cite two data sources: web search and running python scripts under $SKILLS_ROOT/cn-stock-data/scripts. They do not ask to read unrelated system files or environment secrets. Caveat: the skill instructs running external python scripts (not included in this package); those scripts could themselves access network, credentials, or files — so scope depends on the trustworthiness of the referenced cn-stock-data scripts.
✓ 安装机制
No install spec and no bundled code beyond documentation; lowest install risk. The skill is instruction-only and will not write files or download code by itself.
✓ 凭证需求
The skill declares no required env vars, credentials, or config paths. That is appropriate for a documentation/instruction-only analysis skill. Note: runtime commands reference $SKILLS_ROOT and call local python scripts, which may require interpreter presence and access to filesystem/network; such needs are proportional if the referenced scripts are legitimate.
✓ 持久化与权限
always is false and the skill does not request elevated or persistent privileges. disable-model-invocation is false (normal). The skill does not claim to modify other skills or global agent settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/29
Initial release of a-share-event skill for A股事件驱动分析。 - Enables event-driven analysis, announcement interpretation, and policy impact assessment for A股股票. - Automatically triggers on user inquiries about event analysis, corporate actions, or policy effects. - Integrates with cn-stock-data for real-time quotes, price trends, financials, and fund flow. - Supports both institutional (formal) and personal (brief) analysis output styles. - Outlines a clear, stepwise workflow for event recognition, data gathering, impact evaluation, and result generation. - Emphasizes reliance on primary sources (original announcements, full policies) and careful distinction between short-term and long-term effects.
● 无害
安装命令
点击复制官方npx clawhub@latest install a-share-event
镜像加速npx clawhub@latest install a-share-event --registry https://cn.longxiaskill.com