by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill appears coherent and implements a local fund-advisor CLI: it does finance computations, gives allocation/rebalancing suggestions, and keeps simple local logs in ~/.local/share/fund-advisor-cn (or a custom FUND_ADVISOR_CN_DIR). No credentials or network calls were observed in the provided content. Before installing: (1) verify the publisher/source (bytesagain.com / GitHub link listed) if you require provenance; (2) review the full scripts (fund.sh in particular is large — ensure there ...详细分析 ▾
✓ 用途与能力
Name/description (fund screening, DCA, asset allocation, rebalancing) align with the included scripts: fund.sh implements calculations, allocation and rebalance analysis; script.sh implements a local tracking/CLI interface. No unrelated credentials, binaries, or cloud APIs are requested.
ℹ 指令范围
SKILL.md gives CLI usage (help/run) and the scripts run local computations and present advice. The scripts read/write only to a local data directory (FUND_ADVISOR_CN_DIR or $XDG_DATA_HOME/$HOME) and use embedded Python for finance math. SKILL.md and scripts do not direct data to external endpoints in the portions provided. Note: the script writes logs and a local data.log/history.log; if you care about local persistence, expect these files in ~/.local/share/fund-advisor-cn (or custom dir).
✓ 安装机制
No install spec or external downloads are present; this is an instruction-only package with bundled scripts. No network-based installers or archive extraction from arbitrary URLs were observed.
✓ 凭证需求
No required environment variables or credentials are declared. Scripts optionally respect FUND_ADVISOR_CN_DIR, XDG_DATA_HOME and HOME to determine data storage location — reasonable and proportionate for a local CLI tool.
✓ 持久化与权限
always is false and the skill does not request system-wide privileges. It will create and write files under the user's data directory (defaults to ~/.local/share/fund-advisor-cn). Autonomous invocation is allowed by default (platform behavior); if enabled, the agent could run these local scripts and create/modify those files.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv2.0.02026/3/11
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install fund-advisor-cn
镜像加速npx clawhub@latest install fund-advisor-cn --registry https://cn.longxiaskill.com镜像同步中