by 安全扫描
OpenClaw
安全
medium confidenceNULL
评估建议
This skill appears to do what it says: use AkShare to fetch A‑share market and financial data. Before installing/using it: 1) Review and run the included script in a disposable environment (virtualenv/container) — there is a runtime bug in scripts/stock_cli.py (get_fund_flow calls stock_individual_fund_flow without the ak. prefix), and other minor robustness issues; 2) Confirm the package source when running pip install akshare (use PyPI, check version/signature) because pip installs run code at...详细分析 ▾
ℹ 用途与能力
Name/description match the code and instructions: the skill uses the AkShare library to retrieve A‑share quotes, K‑lines, financials, board data, etc. There are no unrelated environment variables or binaries requested. Notable inconsistencies: _meta.json content (ownerId, slug, version) does not match the registry metadata in the submission, which suggests packaging/metadata drift that should be checked.
✓ 指令范围
SKILL.md stays on topic: it tells the user/agent to pip install akshare and shows example calls to AkShare functions. It does not instruct accessing unrelated files, credentials, or external endpoints beyond AkShare's normal network calls. It warns about network issues and suggests local testing.
ℹ 安装机制
No automated install spec is included (instruction-only), but the README recommends pip install akshare. Using pip is expected for Python libs, but pip installs can execute arbitrary package install hooks—install in a virtual environment and verify package provenance if you are cautious.
✓ 凭证需求
The skill requests no environment variables, credentials, or config paths. This is proportionate to the stated purpose. Be aware AkShare makes outbound network requests to public data sources (normal for this functionality).
✓ 持久化与权限
Skill is user-invocable, not always-enabled, and does not request persistent elevated privileges or attempt to modify other skills or global agent config.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/19
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install akshare-stock-tmp
镜像加速npx clawhub@latest install akshare-stock-tmp --registry https://cn.longxiaskill.com