TradingAgents-CN 股票分析助手

多智能体大语言模型金融交易分析助手。基于 TradingAgents-CN 框架，使用多个专业AI分析师协作分析股票（A股/港股/美股），生成投资建议和专业报告。 触发场景： - 用户说"分析某只股票"、"帮我看看茅台"、"股票怎么样" - 用户说"股票分析"、"投资建议"、"股票研究报告" - 用户提到股票代码...

Things to check before installing or running this skill: - Be aware the included scripts expect you to clone the upstream TradingAgents-CN repo into a local folder; the code hardcodes E:\/TradingAgents-CN which will fail on non‑Windows systems or if you choose a different path — inspect and adjust paths before running. - The skill metadata declares no required env vars, but the docs and scripts require multiple API keys (LLM providers and market data APIs). Only provide the minimum API keys you intend to use, and never commit your .env to git. - Running the scripts will send data (stock tickers, prompts, possibly snippets of reports) to third‑party LLM and data provider endpoints — do not include any private or sensitive information in prompts or configuration. - Because the skill is instruction-only and will instruct you to 'pip install -r requirements.txt', review requirements.txt and the cloned repository code before installing dependencies; run in an isolated environment (virtualenv/container) if possible. - The mismatches (no declared env vars, hardcoded path, vague 'AI will remember' note) suggest sloppy packaging rather than overt malice, but exercise caution: review the upstream TradingAgents-CN repository and the included scripts thoroughly before use. If you want, I can summarize the exact lines you should change (path and env handling) to make this safer and portable, or produce a checklist to run the scripts in a sandboxed environment.

Type: OpenClaw Skill Name: tradingagents-cn-assistant Version: 1.2.1 The skill bundle acts as a wrapper for the external 'TradingAgents-CN' GitHub repository, requiring the agent to clone and execute code from a local directory. It contains hardcoded absolute paths ('E:/TradingAgents-CN') in 'scripts/analyze.py' and 'scripts/check_env.py', which is a high-risk practice that could lead to unauthorized file access or execution if the environment is misconfigured. While the functionality aligns with the stated financial analysis purpose, the reliance on external code execution and the lack of path abstraction are significant security vulnerabilities that could be exploited for remote code execution (RCE).