TZZB Analyzer - Tonghuashun Portfolio Analyzer

同花顺投资账本持仓分析工具。自动从同花顺投资账本读取持仓、自选股、交易记录，结合市场行情生成深度分析报告，支持板块分布、风险监控和阈值报警。

This skill needs access to your Chrome debugging endpoint so it can drive your logged-in browser and extract the Tonghuashun session cookies — that is how it reads your holdings, but it is a high-privilege operation. Before installing: 1) Understand that the skill can access browser cookies and pages when it connects to your browser via CHROME_DEBUG_URL. 2) Use an isolated Chrome user-data directory/profile (set CHROME_USER_DATA_DIR) or start a dedicated Chrome instance for this tool so it doesn't attach to your everyday browser profile. 3) Do not set CHROME_KILL_EXISTING unless you want the skill to forcibly terminate Chrome processes. 4) Review the included scripts (especially scripts/tzzb_parser/cookie_extractor.py and main.py) yourself if possible; pay attention to any code paths that call context.cookies() without URL restrictions. If you are uncomfortable granting that level of access, do not install or run the skill. If you proceed, run it in a sandboxed environment or an isolated browser profile to limit exposure.

Type: OpenClaw Skill Name: tzzb-analyzer Version: 2.4.0 The skill bundle provides tools to analyze financial data from the Tonghuashun (10jqka) platform by automating a web browser. It employs high-risk techniques, such as launching Chrome with remote debugging enabled (--remote-debugging-port), killing existing browser processes via taskkill, and programmatically extracting session cookies (scripts/tzzb_parser/cookie_extractor.py) to access private investment data. While these capabilities are plausibly required for the stated purpose of scraping a login-protected financial site, the use of browser automation and direct cookie access represents a significant security risk. No evidence of intentional data exfiltration to unauthorized third-party domains was found in the provided code.