← Back to Skills Marketplace
117
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install stock-10d
Description
A股股票十维深度分析（1000分制）。当用户输入「查询股票 <代码>」「分析股票 <代码>」「股票 <代码>」时自动触发。包含：基本信息、财务数据、技术分析、资金流向、市场情绪、风险提示、机构持仓、估值分析、股东结构、消息面，最后输出综合评分和投资建议。
Usage Guidance
Do not enable or run this skill until the proxy requirement is resolved. The mandatory hard-coded SOCKS5 proxy (socks5://admin:[email protected]:3333) is the primary red flag: it gives the proxy operator access to every request and response and can be used to log, alter, or exfiltrate data. Ask the author why a private proxy with embedded credentials is necessary; require that any proxy be optional and provided by the user (via a declared environment variable) or remove it entirely. Verify the data endpoints (e.g., correct eastmoney hostnames) and prefer using official public APIs or your own trusted network path. If you must test the skill, run it in a network-restricted sandbox and monitor outbound connections, or request the skill source so you can remove/replace the proxy string before use.
Capability Analysis
Type: OpenClaw Skill
Name: stock-10d
Version: 1.0.0
The skill 'stock-analysis-10d' (in SKILL.md) mandates the use of a specific SOCKS5 proxy (54.46.125.68:3333) with hardcoded credentials (admin:admin985) for all network operations. Furthermore, it instructs the agent to fetch data from 'push2.estmoney.com', which is a suspicious typo-squatted domain of the legitimate 'eastmoney.com'. These requirements facilitate Man-in-the-Middle (MITM) attacks and the harvesting of user stock queries through untrusted infrastructure.
Capability Assessment
Purpose & Capability
The skill's stated purpose (10-dimension A-share analysis using public market data) is coherent with the curl-based API calls to market-data endpoints. However, the SKILL.md mandates routing every request through a specific external SOCKS5 proxy (socks5://admin:[email protected]:3333). Needing a private proxy with embedded credentials is not required to fetch public market data and is not justified by the stated purpose.
Instruction Scope
The runtime instructions explicitly require the agent to run curl commands with the hard-coded proxy for every API call. That gives the proxy operator full visibility into requests/responses and the ability to modify traffic. The SKILL.md otherwise stays on-task (fetch market data, compute scores), but the mandatory proxy requirement expands the risk surface. There are also minor inconsistencies in hostnames (e.g., 'push2.estmoney.com' vs expected 'eastmoney') which could be typos or intentional obfuscation.
Install Mechanism
This is an instruction-only skill with no install spec and no code files, which lowers the risk from arbitrary code being written to disk. There is no package download or installation step.
Credentials
No environment variables or credentials are declared, but the SKILL.md embeds credentials inside the proxy URL. Hard-coded third-party credentials are disproportionate for a read-only public-data analysis task and effectively request trust in an external operator. This is equivalent to asking the user to hand traffic and data to an unknown remote operator.
Persistence & Privilege
The skill does not request persistent presence (always:false), does not modify other skills or system-wide config, and does not require elevated privileges. Autonomous invocation is enabled by default but is not in itself a problem here.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install stock-10d - After installation, invoke the skill by name or use
/stock-10d - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release
Metadata
Frequently Asked Questions
What is A股十维分析?
A股股票十维深度分析（1000分制）。当用户输入「查询股票 <代码>」「分析股票 <代码>」「股票 <代码>」时自动触发。包含：基本信息、财务数据、技术分析、资金流向、市场情绪、风险提示、机构持仓、估值分析、股东结构、消息面，最后输出综合评分和投资建议。 It is an AI Agent Skill for Claude Code / OpenClaw, with 117 downloads so far.
How do I install A股十维分析?
Run "/install stock-10d" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is A股十维分析 free?
Yes, A股十维分析 is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does A股十维分析 support?
A股十维分析 is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created A股十维分析?
It is built and maintained by hsyhph (@hsyhph); the current version is v1.0.0.
More Skills