← Back to Skills Marketplace
101
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install stock-market-analyzer
Description
A-share stock market analysis tool with real-time price data, technical indicators, trend analysis, and portfolio tracking. Supports querying opening/closing...
Usage Guidance
This package largely does what it claims, but it relies on an undocumented external module 'kimi_finance' whose source and behavior are not provided. Before installing or running this skill: (1) verify where 'kimi_finance' comes from (PyPI project page, source repo, or vendor) and review its source or documentation; (2) avoid running it on machines with sensitive data until you confirm the dependency is safe; (3) if you plan to install, add an explicit install spec or update requirements to include 'kimi_finance' with a specific version and origin; (4) run the code in a sandbox or container and monitor network traffic to see which endpoints it contacts; (5) prefer skills with a clear homepage, source repo, and declared dependencies. If you can provide the 'kimi_finance' package source or more provenance, I can re-evaluate and likely raise confidence.
Capability Analysis
Type: OpenClaw Skill
Name: stock-market-analyzer
Version: 1.0.0
The script `scripts/stock_analyzer.py` contains a potential arbitrary file read vulnerability because several functions (e.g., `query_realtime_price`) accept a user-controlled `file_path` argument that is passed directly to `pandas.read_csv()` without validation. This could allow an attacker to exfiltrate sensitive system files if they can influence the function arguments via prompt injection. Additionally, the code relies on an external module `kimi_finance` that is not declared in the `requirements.txt` file, which is a discrepancy in the bundle's dependency management.
Capability Assessment
Purpose & Capability
Name/description align with the included code (functions for realtime prices, indicators, summaries, portfolio analysis). However, the code depends on an external module named 'kimi_finance' (used to fetch/write data) that is not declared in requirements.txt or SKILL.md and whose origin is unknown — this dependency is integral to the skill but not documented, which is disproportionate to the published metadata.
Instruction Scope
SKILL.md contains usage examples that match the code (calling query_realtime_price, query_technical_indicators, etc.). The instructions do not ask the agent to read unrelated files, environment variables, or contact unexpected endpoints. The implementation writes temporary CSVs under /tmp and returns their contents; that behavior is within scope but worth noting.
Install Mechanism
There is no install spec (no automatic download/install). A requirements.txt is present listing pandas, requests, numpy but not the critical 'kimi_finance' dependency used by the code. The absence of an install mechanism for that dependency and the lack of a declared package source (PyPI/project homepage) is an inconsistency that increases risk because the skill relies on an undeclared third-party component.
Credentials
The skill declares no required environment variables or credentials, which is reasonable for a read-only market-analysis tool. However, the unknown 'kimi_finance' package could perform network requests or require credentials internally; because its origin and behavior are not visible, it's not possible to confirm that no sensitive data will be accessed or transmitted.
Persistence & Privilege
The skill does not request persistent or elevated privileges (always is false, no config paths, no system modifications). It only writes temporary CSV files to /tmp, which is expected for local caching and is within a limited scope.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install stock-market-analyzer - After installation, invoke the skill by name or use
/stock-market-analyzer - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
- Initial release of Stock Market Analyzer for A-share markets.
- Provides real-time price data, opening/closing summaries, and technical indicators (RSI, MACD, KDJ, BOLL, MA, etc.).
- Supports portfolio tracking and performance analysis.
- Allows querying for both Shanghai (SH) and Shenzhen (SZ) stock exchanges.
Metadata
Frequently Asked Questions
What is Stock Market Analyzer?
A-share stock market analysis tool with real-time price data, technical indicators, trend analysis, and portfolio tracking. Supports querying opening/closing... It is an AI Agent Skill for Claude Code / OpenClaw, with 101 downloads so far.
How do I install Stock Market Analyzer?
Run "/install stock-market-analyzer" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Stock Market Analyzer free?
Yes, Stock Market Analyzer is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Stock Market Analyzer support?
Stock Market Analyzer is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Stock Market Analyzer?
It is built and maintained by Lv Lancer (@kaiyuelv); the current version is v1.0.0.
More Skills