by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill appears to do exactly what it says: run AkShare calls to fetch A‑share data. Before installing: 1) run pip install akshare in a virtualenv to avoid affecting your system Python; 2) be aware AkShare will make outbound requests to public data sources (network traffic and query content may leave your machine) — if that matters, run it in an isolated environment; 3) review the AkShare package/version on PyPI and its dependencies for supply-chain concerns; 4) note and fix the minor bug in ...详细分析 ▾
✓ 用途与能力
Name/description, SKILL.md examples, and the included Python script all consistently target retrieving A‑share market, K‑line, financial and board data via the AkShare library. No unrelated credentials, binaries, or config paths are requested.
ℹ 指令范围
SKILL.md instructs to pip install akshare and shows usage examples. Instructions do network I/O via AkShare (expected for market data). The included script is straightforward and prints JSON; it does not read arbitrary files or exfiltrate data to unexpected endpoints. Note: the script contains a bug (get_fund_flow calls stock_individual_fund_flow without qualifying it with ak.), which will raise a NameError at runtime unless corrected.
✓ 安装机制
No automated install spec is provided (instruction-only). SKILL.md asks users to run 'pip install akshare' which pulls from PyPI — expected for a Python data-fetching tool. This is a normal, low-risk installation pattern; review PyPI package provenance before install if you have strong supply-chain concerns.
✓ 凭证需求
The skill requests no environment variables, credentials, or config paths. That is proportionate to the described functionality. The only external requirement is network access for AkShare to query data providers.
✓ 持久化与权限
always is false and model invocation is not disabled (normal). The skill does not request persistent system-level privileges or modify other skills. It does not attempt to store tokens or alter agent-wide configuration.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.12026/3/2
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install akshare-stock
镜像加速npx clawhub@latest install akshare-stock --registry https://cn.longxiaskill.com