by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill appears coherent and limited to fetching A‑share data from Sina and storing a local portfolio file. Things to consider before installing: (1) the scripts make outbound HTTPS requests to hq.sinajs.cn and quotes.sina.cn — ensure you are comfortable with that network access; (2) the portfolio is stored at ~/.clawdbot/skills/a-stock-analysis/portfolio.json (local, unencrypted) — don't store secrets there; (3) SKILL.md mentions 东方财富 but the code uses Sina — functionally OK but you may want...详细分析 ▾
✓ 用途与能力
Name/intent (A股分时量能分析) matches the included scripts and SKILL.md. The code fetches real‑time quotes and minute K‑line data and performs volume distribution and signal analysis as described. Minor note: SKILL.md mentions 东方财富 and 新浪, but the scripts use Sina endpoints (hq.sinajs.cn and quotes.sina.cn); this is likely an implementation detail rather than a functional mismatch.
✓ 指令范围
SKILL.md only instructs running the included Python scripts and describes expected CLI usage and outputs. The instructions do not request unrelated files, extra credentials, or external endpoints beyond the finance APIs. The skill explicitly documents the portfolio file path (~/.clawdbot/skills/a-stock-analysis/portfolio.json) which the portfolio script reads/writes.
✓ 安装机制
No install spec is provided (instruction-only with code files). There is no network install or archive extraction; risk from install mechanism is minimal. The scripts require Python 3.10+ but list no external dependencies.
✓ 凭证需求
The skill declares no environment variables, credentials, or special config paths beyond its own portfolio file in the user's home directory. It performs outbound HTTP(S) calls only to Sina finance endpoints, which is proportional to its stated purpose.
✓ 持久化与权限
always is false and the skill does not request persistent platform privileges. It writes a portfolio JSON under ~/.clawdbot/skills/a-stock-analysis/, which is reasonable for a local portfolio feature and scoped to the skill's directory.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/1/27
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install a-stock-analysis
镜像加速npx clawhub@latest install a-stock-analysis --registry https://cn.longxiaskill.com