by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill is internally coherent and appears to be purely an analytical framework rather than code that runs on your system. Before using it: (1) remember it is educational and not financial advice — verify any trade decisions yourself; (2) when the skill asks to fetch real-time data, ensure the external tools or web sources it uses are trustworthy; (3) do not provide brokerage or other sensitive credentials to the skill (none are requested); and (4) note the skill's source/homepage is unknown ...详细分析 ▾
✓ 用途与能力
The name/description (三维投资分析框架) matches the provided SKILL.md and reference documents: they describe macro/industry/company analysis, checklists, workflows and report templates. The skill does not request unrelated binaries, credentials, or config paths.
✓ 指令范围
SKILL.md contains only investment-analysis steps, templates, and workflows. It suggests combining with WebSearch/Stock Analysis/Buffett Analysis (other tools/skills) to fetch up-to-date data, which is appropriate for the purpose. There are no instructions to read arbitrary host files, access system config, or transmit data to unexpected endpoints.
✓ 安装机制
This is an instruction-only skill with no install spec and no code files to write or execute on disk, which minimizes installation risk.
✓ 凭证需求
No required environment variables, credentials, or config paths are declared. The guidance to use external data sources is reasonable for investment analysis, and there is no disproportionate request for secrets or unrelated service keys.
✓ 持久化与权限
Skill flags are default (always: false, user-invocable: true, disable-model-invocation: false). Allowing autonomous invocation is platform-default and acceptable here because the skill does not request elevated privileges or persistent credentials.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/2
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install zhao-investment
镜像加速npx clawhub@latest install zhao-investment --registry https://cn.longxiaskill.com镜像同步中