📦 prana-astock-financial-analysis — A股财报六维分析

v1.0.19

一键调用 Prana 远程 agent，自动抓取并解析 A 股上市公司近 8 季度财报，从盈利、偿债、营运、成长、现金流、估值六大维度生成交互式 HTML 可视化报告，助你 30 秒看懂企业财务健康度。

0· 220·1 当前·1 累计

by @gocybertrade (goCyberTrade)

数据分析 API工具自动化云服务

下载技能包

最后更新

2026/4/8

安全扫描

VirusTotal

无害

查看报告

OpenClaw

安全

high confidence

The skill's code, instructions, and required environment variable are internally consistent for calling a remote Prana agent; it requests only a single API key via PRANA_SKILL_API_FLAG and the included client scripts use only that key and the documented endpoints.

评估建议

This skill appears to do what it claims: it uses a single API key (PRANA_SKILL_API_FLAG) to call a remote Prana agent and returns an analysis report. Before installing/using: (1) Confirm you trust the remote host (https://claw-uat.ebonex.io appears to be a UAT/staging domain); (2) Do not paste the full api_key into chat—follow the SKILL.md process and give explicit consent before retrieving/setting the key; (3) Prefer setting the key as a temporary/session env var unless you intentionally want p...

详细分析 ▾

✓ 用途与能力

Name/description (A-share financial analysis) align with the included client scripts and network calls. The only required secret is PRANA_SKILL_API_FLAG which is needed to call the remote agent endpoints; no unrelated credentials or system accesses are requested.

ℹ 指令范围

SKILL.md imposes a strict, multi-step process around acquiring and setting an api_key and instructs running the included client scripts. The steps focus on user confirmation and env var setting and do not ask the agent to read unrelated files or secrets. The strict prohibition on re-fetching keys if PRANA_SKILL_API_FLAG exists is unusual but consistent with the described workflow.

✓ 安装机制

No install spec; this is an instruction-only skill with two simple client scripts included. Nothing is downloaded from external, arbitrary URLs and no installers are executed—low install risk.

✓ 凭证需求

Only PRANA_SKILL_API_FLAG is required. That single API key is proportionate to calling the remote Prana endpoints; no other secrets, tokens, or config paths are requested.

ℹ 持久化与权限

always:false and the clients are not autonomously modifying other skills. SKILL.md recommends (user-choice) writing PRANA_SKILL_API_FLAG as a global env via an 'openclaw config set' command; that would create persistent credential state if the user chooses it—this is a valid option but increases persistence and should be chosen consciously by the user.

⚠ scripts/prana_skill_client.js:140

Environment variable access combined with network send.

安全有层次，运行前请审查代码。

运行时依赖

无特殊依赖

版本

latestv1.0.192026/3/31

**Changelog for prana-astock-financial-analysis v1.0.19** - Strengthened environment variable handling rules: Once PRANA_SKILL_API_FLAG is set, all forms of api_key refetch/refresh (GET /api/v2/api-keys) are strictly and absolutely forbidden. - Updated process rules: No key rotation, overwrite, or re-fetch is permitted under any scenario if PRANA_SKILL_API_FLAG already exists; failures must be reported to the user. - Clarified output and retry rules: Added explicit requirement for user confirmation before continuing after error messages or “retries/attempts reached” prompts. - Improved scenario description to cover both financial health and valuation analysis. - Documentation streamlined for clarity; repeatedly emphasizes strict one-way/one-time key issuance behavior and prohibition of unsanctioned retries or self-initiated key fetches.

● 无害

安装命令

点击复制

官方npx clawhub@latest install prana-astock-financial-analysis

镜像加速npx clawhub@latest install prana-astock-financial-analysis --registry https://cn.longxiaskill.com

数据来源：ClawHub ↗ · 中文优化：龙虾技能库