📦 A
v1.0.0股票分析师.BakA股智投大师 | A股智能投研助手 | 行情分析 | 基本面分析 | 智能选股 | 自选股管理 | 监控预警
0· 20·0 当前·0 累计
by 下载技能包
最后更新
2026/4/20
安全扫描
OpenClaw
可疑
medium confidenceThe skill mostly does what its description says (stock data + analysis) but has inconsistencies around credential declaration and provenance that warrant caution before installing.
评估建议
What to check before installing:
- Verify the data endpoint: the script posts to https://mkapi2.dfcfs.com/finskillshub/api/claw. Confirm that this domain is the legitimate Eastmoney/妙想 API you expect before providing an API key.
- API key handling: the code expects MX_API_KEY or MX_SEARCH_API_KEY but the skill metadata declares no required env vars. Ask the publisher to explicitly list required env vars and where the key will be stored/used. Treat the API key as sensitive: only provide it if yo...详细分析 ▾
ℹ 用途与能力
The skill's name/description (A股分析) matches its behavior: it queries a market-data API, performs screening, self-select management and news search. Requesting an Eastmoney-style API key is coherent. However, the package metadata does not declare any required env vars while the code expects MX_API_KEY or MX_SEARCH_API_KEY — an internal documentation/manifest mismatch.
✓ 指令范围
SKILL.md confines runtime actions to calling other skills (mx-data, mx-search, etc.) and Eastmoney/妙想 API for data. It does not instruct reading arbitrary system files or sending data to unexpected endpoints beyond the stated data provider.
✓ 安装机制
There is no install spec (instruction-only plus included Python script). No downloads from external URLs or archive extraction are requested. The only executable code is a contained Python script that makes network requests.
⚠ 凭证需求
The code reads MX_API_KEY / MX_SEARCH_API_KEY from the environment and sends it as an 'apikey' header to https://mkapi2.dfcfs.com/finskillshub/api/claw. The skill manifest lists no required env vars, yet SKILL.md instructs the user to configure an API Key into other skills. This mismatch (undeclared credential usage + transmitting the key to an external host) is disproportionate to what the manifest advertises and should be clarified.
✓ 持久化与权限
The skill does not request always:true, does not modify other skills' configs, and does not claim system-wide persistence. It can be invoked autonomously (platform default) but that alone is not flagged.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/20
a-stock-analyst-bak v1.0.0 - 首发版本，发布“A股智投大师”智能投研助手。 - 支持A股行情分析、基本面分析、智能选股、自选股管理、监控预警等功能。 - 集成东方财富数据，依赖多个配套技能（mx-data、mx-search、mx-select-stock、mx-selfselect、stock-monitor-skill）。 - 提供详细API Key配置说明与常见A股特色指标支持。 - 包含标准工作流程、核心分析Prompt及常用命令指南。
● 无害
安装命令
点击复制官方npx clawhub@latest install a-stock-analyst-bak
镜像加速npx clawhub@latest install a-stock-analyst-bak --registry https://cn.longxiaskill.com