📦 Revelata DeepKPI Financial Analysis Agent — 财报KPI速查
v1.0.0基于Revelata deepKPI数据库，一键抽取美国上市公司SEC 10-K/10-Q/8-K等披露文件中的结构化财务与运营关键指标，为投资与决策提供即时数据支持。
0· 100·0 当前·0 累计
by 下载技能包
最后更新
2026/3/28
安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill appears internally consistent and low-risk because it is instruction-only and only requires a single API key plus curl. Before enabling it, ensure the DEEPKPI_API_KEY you provide is a legitimate Revelata key with appropriate (least) privilege and monitoring enabled—API keys grant access/credits and could be used to make calls on your behalf. Confirm you trust the source (Revelata) for billing/credits and provenance URLs. Note the skill will construct .xlsx files if you accept the file...详细分析 ▾
✓ 用途与能力
Name/description (deepKPI KPI pulls, derivations, seasonality, Excel exports) match the declared requirements: a single API key (DEEPKPI_API_KEY) and curl. No unrelated credentials, binaries, or config paths are requested. The Claude/MCP vs OpenClaw fallback is documented and explains why the API key is required in some runtimes.
✓ 指令范围
All runtime instructions in the SKILL.md and subsidiary docs are narrowly focused on querying deepKPI endpoints, deriving metrics from deepKPI-sourced operands, preserving provenance URLs, and formatting/exporting results. The docs do not instruct reading unrelated system files or environment variables, nor do they direct data to unexpected external endpoints beyond the documented deepkpi-api.revelata.com base URL. The workflow is prescriptive (e.g., always list_kpis, preserve provenance, offer Excel) but stays within the stated purpose.
✓ 安装机制
Instruction-only skill with no install spec and no code files; this minimizes disk-write and supply-chain risk. Required binary is only curl, which is reasonable for making REST calls. No external downloads, package installs, or extract operations are present.
✓ 凭证需求
Only one required environment variable (DEEPKPI_API_KEY) is declared and used. That is proportionate and expected for a REST API integration; no unrelated secrets or elevated credentials are requested.
✓ 持久化与权限
The skill is not always-included (always:false) and does not request system persistence or to modify other skills. It can be invoked autonomously by the agent (platform default), which is expected for a data-access skill; this increases blast radius only in the sense that the agent could make API calls with the provided key if permitted by policy, but that is normal and documented.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/28
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install revelata-deepkpi
镜像加速npx clawhub@latest install revelata-deepkpi --registry https://cn.longxiaskill.com