← Back to Skills Marketplace
wuritu

Stock Fundamental Analysis

by wuritu · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
85
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install stock-fundamental-analysis
Description
对上市公司进行深度基本面分析,包括财务健康度评估、估值分析、成长性分析、行业对标、财报解读,输出结构化投研报告
Usage Guidance
Do not install or enable this skill yet. Key concerns: (1) SKILL.md lists several helper scripts (health_checker.py, growth_analyzer.py, industry_comparator.py, report_parser.py, shareholder_tracker.py) that are missing from the package — ask the author to supply those files or update the instructions. (2) financial_fetcher.py appends a relative 'toc-trading/src' path and imports StockDataAdapter from there; confirm where 'toc-trading' comes from, whether it will be present at runtime, and inspect that adapter's code for how it handles your STOCK_DATA_API_KEY and remote endpoints. (3) Verify the provenance of the package (source/homepage unknown) and ensure the data provider is trusted and licensed. If you must test this skill, do so in an isolated environment, monitor network calls, and avoid providing high‑privilege or long‑lived credentials until you confirm how the key is used.
Capability Analysis
Type: OpenClaw Skill Name: stock-fundamental-analysis Version: 1.0.0 The skill bundle contains a significant shell injection vulnerability in SKILL.md, as it instructs the AI agent to execute bash commands using unsanitized user input (<代码>). Additionally, the bundle is incomplete, referencing several missing utility scripts (e.g., health_checker.py, growth_analyzer.py), and financial_fetcher.py relies on a hardcoded relative path to an external repository (../../toc-trading/src) which is outside the bundle's control.
Capability Assessment
Purpose & Capability
The skill claims to perform multi‑dimensional fundamental analysis and includes a valuation engine (valuation_engine.py) and a data fetcher (financial_fetcher.py), which is coherent with the stated purpose. However, SKILL.md expects many other helper scripts (health_checker.py, growth_analyzer.py, industry_comparator.py, report_parser.py, shareholder_tracker.py) that are not present in the bundle. The fetcher also inserts a path to a local 'toc-trading/src' module (stock_data_adapter) which is not declared in requirements or documented — relying on a local/sidecar package is unexpected and unexplained.
Instruction Scope
The SKILL.md runtime commands call a set of tools that do not exist in the package (e.g., tools/health_checker.py, tools/growth_analyzer.py). That means following the provided instructions will fail or cause the integrator/agent to search for or attempt to import missing modules. The instructions also reference {baseDir} and expect scripts under tools/ but the manifest only includes two files. No instructions ask for unrelated system files, but the mismatch gives the agent broad discretion to locate/require other code (toc-trading), which is a scope creep and operational risk.
Install Mechanism
There is no install spec (instruction-only), which lowers installation risk. However, financial_fetcher.py dynamically adds a relative path to 'toc-trading/src' into sys.path at runtime; this implicitly depends on an external/local repository to be present. Because that dependency is not declared or bundled, it is unexpected and could cause the agent to import code from an unknown location on disk or fail at runtime.
Credentials
The skill requests a single API credential (STOCK_DATA_API_KEY) as its primary credential, which is proportionate for fetching market/financial data. The included files do not read other environment variables. Note: the supplied code does not explicitly show how STOCK_DATA_API_KEY is consumed — likely the stock_data_adapter (external) would use it, so the key's usage should be confirmed before granting.
Persistence & Privilege
The skill does not request always: true and does not declare any system config paths. It is user-invocable and allows normal autonomous invocation. There is no evidence the skill modifies other skills or system-wide settings.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install stock-fundamental-analysis
  3. After installation, invoke the skill by name or use /stock-fundamental-analysis
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
- Initial release of stock fundamental analysis skill. - Provides structured deep analysis reports, including financial health evaluation, valuation metrics, growth assessment, industry benchmarking, financial report interpretation, and shareholder/agency tracking. - Features comprehensive scoring across key dimensions with weighted aggregation. - Uses Markdown for structured outputs, includes data tables, clear data sources, and mandatory investment disclaimers.
Metadata
Slug stock-fundamental-analysis
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Stock Fundamental Analysis?

对上市公司进行深度基本面分析,包括财务健康度评估、估值分析、成长性分析、行业对标、财报解读,输出结构化投研报告. It is an AI Agent Skill for Claude Code / OpenClaw, with 85 downloads so far.

How do I install Stock Fundamental Analysis?

Run "/install stock-fundamental-analysis" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Stock Fundamental Analysis free?

Yes, Stock Fundamental Analysis is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Stock Fundamental Analysis support?

Stock Fundamental Analysis is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Stock Fundamental Analysis?

It is built and maintained by wuritu (@wuritu); the current version is v1.0.0.

💬 Comments