← Back to Skills Marketplace
VN Stock Scanner
by
Do Van Hoang
· GitHub ↗
· v1.0.0
· MIT-0
230
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install hoang-vn-stock-scanner
Description
Chuyên gia phân tích chứng khoán Việt Nam (VN-Index, HoSE, HNX, UPCoM). Sử dụng để LẤY TIN TỨC CHỨNG KHOÁN (cập nhật CafeF, tin đồn, tin chủ tịch mua/bán, ch...
README (SKILL.md)
VN Stock Scanner
Đây là Agent Skill được thiết kế riêng cho chứng khoán Việt Nam, lấy dữ liệu trực tiếp từ các nguồn uy tín như CafeF và API của công ty chứng khoán (TCBS).
1. Tra cứu thông tin mã cổ phiếu (Ticker Info)
Khi user hỏi về một mã chứng khoán (VD: "Phân tích mã FPT", "Chỉ số của VCB thế nào?"):
- Trích xuất mã cổ phiếu (
ticker): ví dụFPT,VCB,HPG. - Sử dụng tool
execgọi lệnh:python3 /home/hoang/.openclaw/workspace/vn-stock-scanner/scripts/scanner.py ticker --ticker \x3Cmã_cổ_phiếu> - Dùng thông tin trả về (P/E, P/B, EPS, Tỷ suất cổ tức...) để trả lời user và đưa ra nhận định ngắn gọn.
2. Quét tin tức và tin đồn (News & Rumor Scanner)
Khi user hỏi "Có tin tức chứng khoán gì hot không?", "Tìm tin đồn", "Chủ tịch đăng ký mua bán":
- Nhận diện từ khóa user quan tâm (
keywords). Nếu user muốn tin chung chung thì bỏ trống. Nếu user muốn tin về mua/bán nội bộ, thì truyềnkeywords="mua,bán,chủ tịch,đăng ký". - Sử dụng tool
execgọi lệnh:python3 /home/hoang/.openclaw/workspace/vn-stock-scanner/scripts/scanner.py news --keywords "\x3Ctừ_khóa>" - Lọc các tin tức trả về và định dạng lại gọn gàng để gửi cho user. Đưa ra nhận xét khách quan về tác động của các tin này tới thị trường (Tích cực/Tiêu cực/Trung lập).
Usage Guidance
This skill appears to do what it says: fetch CafeF RSS items and call a TCBS public API, then return structured JSON for the agent to use. Before installing, check two things: (1) SKILL.md uses a hard-coded path (/home/hoang/.openclaw/...); confirm the agent runtime can locate and execute scripts/scanner.py or update the path to the actual installation location. (2) The script disables SSL verification (verify=False) — consider removing that (use verify=True) to avoid MITM risk. No credentials are requested and no unrelated system files are accessed, so the principal risks are operational (path mismatch, weaker TLS). If you want extra safety, run it on-demand (not always-enabled) and review/modify the script to enable certificate verification and to use relative paths or the runtime's canonical skill path.
Capability Analysis
Type: OpenClaw Skill
Name: hoang-vn-stock-scanner
Version: 1.0.0
The skill contains a significant command injection vulnerability in SKILL.md, where user-provided input (ticker symbols or keywords) is directly embedded into a shell command executed via the 'exec' tool. Additionally, scripts/scanner.py explicitly disables SSL certificate verification (verify=False) for its network requests to CafeF and TCBS, increasing the risk of man-in-the-middle attacks. While the script's logic appears aligned with its stated purpose of stock analysis, these security flaws represent high-risk behaviors.
Capability Assessment
Purpose & Capability
The name/description (CafeF news + TCBS ticker data) match the included script and SKILL.md instructions: the script fetches CafeF RSS and a TCBS public API. Minor oddity: SKILL.md instructs running a hard-coded absolute path (/home/hoang/.openclaw/...), while the packaged file sits at scripts/scanner.py — this path may not exist in other runtimes and is unnecessary for the stated purpose.
Instruction Scope
Instructions are narrowly scoped to two actions (news and ticker) and tell the agent to exec the included script and use its JSON output. They do not request extra files, credentials, or unrelated system data. Caveat: the instructions specify executing a fixed absolute path which is environment-specific; running the script is required for functionality.
Install Mechanism
No install spec — instruction-only with an included Python script. This is low-risk from an installation perspective because nothing is downloaded or written at install time.
Credentials
The skill requests no environment variables or credentials (proportionate). The script only makes outbound HTTP(S) calls to expected endpoints. Security concern: the code disables SSL verification (requests.get(..., verify=False) and urllib3.disable_warnings), which weakens transport security and could allow MITM tampering of fetched data.
Persistence & Privilege
always:false and no code that modifies system or other skills. The skill does not request persistent privileges or modify global configuration.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install hoang-vn-stock-scanner - After installation, invoke the skill by name or use
/hoang-vn-stock-scanner - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Bản phát hành đầu tiên: Quét tin tức CafeF & Check mã cổ phiếu TCBS
Metadata
Frequently Asked Questions
What is VN Stock Scanner?
Chuyên gia phân tích chứng khoán Việt Nam (VN-Index, HoSE, HNX, UPCoM). Sử dụng để LẤY TIN TỨC CHỨNG KHOÁN (cập nhật CafeF, tin đồn, tin chủ tịch mua/bán, ch... It is an AI Agent Skill for Claude Code / OpenClaw, with 230 downloads so far.
How do I install VN Stock Scanner?
Run "/install hoang-vn-stock-scanner" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is VN Stock Scanner free?
Yes, VN Stock Scanner is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does VN Stock Scanner support?
VN Stock Scanner is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created VN Stock Scanner?
It is built and maintained by Do Van Hoang (@hoanghust2003); the current version is v1.0.0.
More Skills