📦 OpenClaw Orchestrator — 金融Python团队
v1.0.1全栈金融Python团队主控技能，自动路由任务至Simons、Carmen、Ada三子代理，支持自由模式。
0· 72·0 当前·0 累计
by 下载技能包
最后更新
2026/4/1
安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
Before installing, review the referenced files (AGENTS.md, MEMORY.md, and all skills/orchestrate/ref_*.md) to confirm they are bundled with the skill and do not contain secrets. Ask the publisher where AGENTS.md and MEMORY.md are expected to live (skill-local vs workspace-root). If you allow this skill, restrict it to a sandboxed agent runner, disable any undesired 'FREE_MODE' default (or verify what the free model does and what data it can receive), and avoid supplying any credentials or sensit...详细分析 ▾
ℹ 用途与能力
The name/description (orchestrator for a Python/finance team) aligns with the SKILL.md: it routes tasks and spawns sub-agents and references role/model tables and guardrails. However, the skill metadata declares no required config paths or credentials while the runtime instructions explicitly require reading AGENTS.md and MEMORY.md (and multiple reference files). That mismatch (declared none vs. expected reads) is an inconsistency.
⚠ 指令范围
The runtime instructions direct the agent to read AGENTS.md and MEMORY.md and a set of ref files. AGENTS.md and MEMORY.md are not given explicit paths in the metadata; that raises a scope creep risk because those filenames could refer to workspace-level files outside the skill bundle and may contain sensitive info. The instructions also automatically select models based on FREE_MODE, potentially routing spawns to an external provider ('openrouter/stepfun/...:free').
✓ 安装机制
No install spec and no code files are present (instruction-only). This minimizes disk-write/install risk — nothing is downloaded or executed beyond the agent following its textual instructions.
ℹ 凭证需求
The skill declares no required env vars or credentials, which is plausible for an instruction-only orchestrator. But it does reference external model IDs (openrouter) and reads memory/config files without declaring them as required config paths. The absence of declared requirements combined with file reads is an incoherence worth noting.
ℹ 持久化与权限
always is false and autonomous invocation is allowed (platform default). The skill spawns sub-agents and chooses models autonomously; that is expected for an orchestrator but increases blast radius if the referenced files or model-selection rules are manipulated. No persistent installation or modifications to other skills are requested.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.12026/4/1
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install finclaws
镜像加速npx clawhub@latest install finclaws --registry https://cn.longxiaskill.com