new-stock-analyzer

免费、实时、全面的A股新股分析工具。支持双数据源（东方财富+中财网），提供今日新股查询、基本面分析、风险评估、申购建议，直接在OpenClaw会话中发送通知。

This skill appears to do what it says (fetch and analyze public A‑share IPO data), but review a few things before installing or enabling automatic tasks: - Inspect openclaw_notifier.py to see where notifications are sent and whether it requires any secrets or calls external endpoints you don't control. Do not enable automatic sending until you confirm the destination. - Review scripts/setup_cron.sh and openclaw_daily*.sh to understand what gets scheduled. If you run the script it will modify your crontab and schedule repeated network activity. - Note one EastMoney API call in the code uses http:// (not HTTPS) which can allow MITM tampering — consider changing to HTTPS or validating responses. - Run the tool inside a dedicated virtualenv and examine network traffic (or run in an isolated environment) the first time to confirm behavior. - If you do not trust the source (source/homepage unknown), consider reviewing all files locally or running only unit-test/inspection commands rather than executing installation/setup scripts that modify system state. If you want, I can: (1) show the contents of scripts/setup_cron.sh and openclaw_notifier.py (if provided) and highlight exact lines of concern, or (2) list a safe sequence of commands to run this tool in a sandboxed environment.

Type: OpenClaw Skill Name: new-stock-analyzer Version: 1.0.2 The 'new-stock-analyzer' bundle is a comprehensive tool designed to fetch, validate, and analyze A-share IPO data from sources like EastMoney and CFI. The code demonstrates high-quality modular design, including multi-source data validation, automated reporting, and local caching mechanisms. While the bundle includes scripts for persistence (setup_cron.sh) and system resource monitoring (openclaw_daily.sh), these behaviors are explicitly documented and aligned with the tool's stated purpose of providing automated daily stock analysis. No evidence of data exfiltration, malicious prompt injection, or unauthorized remote access was found.