← Back to Skills Marketplace
206
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install investment-brief-generator
Description
股票分析 AI 工具 | 智能投资简报生成器 - 自动生成个股分析报告、市场热点追踪、持仓监控。支持 A股/港股/美股，实时股价查询，技术分析，研报生成。一键生成专业 Markdown 投资报告。
README (SKILL.md)
智能投资简报生成器
基于 Tavily AI 搜索的股票投资分析工具，自动生成专业投资简报。
功能特点
- 🔍 AI 智能搜索 - 使用 Tavily API 获取实时股票数据和市场信息
- 📊 个股深度分析 - 自动生成包含价格、估值、技术形态的分析报告
- 🎯 持仓股监控 - 支持多只股票同时监控，自定义提醒价位
- 📄 专业简报输出 - 生成格式化的 Markdown 投资简报
- ⚡ 一键生成 - 简单命令即可获取完整分析报告
使用方法
生成个股分析报告
node {baseDir}/scripts/generate-brief.mjs --stock 002837 --name 英维克
生成市场热点简报
node {baseDir}/scripts/generate-brief.mjs --market
监控持仓股
node {baseDir}/scripts/generate-brief.mjs --portfolio
配置
需要设置 Tavily API Key：
export TAVILY_API_KEY=your_api_key_here
或在 OpenClaw 配置中添加：
{
"env": {
"vars": {
"TAVILY_API_KEY": "your_api_key_here"
}
}
}
输出示例
简报包含以下内容：
- 股票基本信息（价格、涨跌幅、成交量）
- 技术面分析（支撑/阻力位）
- 基本面亮点
- 市场情绪
- 操作建议
依赖
- Node.js 18+
- Tavily API Key
- OpenClaw 环境
License
MIT
Usage Guidance
This skill appears to do what it claims: generate stock reports using Tavily. Before installing or running it, check that you (1) actually have a valid TAVILY_API_KEY and are comfortable providing it to the skill, (2) verify whether you have or want the dependent skill ~/.openclaw/skills/tavily-search/scripts/search.mjs — if that file is missing the tool will fail, and if it's present you should review it to ensure it doesn't perform unexpected network calls or exfiltrate data, (3) be aware the script uses child_process.execSync to run the search script with user-supplied queries; avoid passing untrusted/unsanitized input and consider running it in a sandboxed environment, and (4) confirm Node.js 18+ is used. If you want higher assurance, open and review the referenced tavily-search script (or replace the exec call with a direct API client) and test with a throwaway API key first.
Capability Analysis
Type: OpenClaw Skill
Name: investment-brief-generator
Version: 1.0.1
The script `scripts/generate-brief.mjs` is vulnerable to shell injection because it passes unsanitized command-line arguments (`--stock` and `--name`) directly into a system command executed via `execSync`. While the tool's logic appears consistent with its stated purpose of generating investment reports, this flaw allows for arbitrary command execution if provided with malicious input. Additionally, the script relies on a hardcoded file path within the user's home directory (`.openclaw/skills/tavily-search/`) to execute a secondary dependency.
Capability Assessment
Purpose & Capability
Name/description, required binary (node), and the single required env var (TAVILY_API_KEY) line up with a Tavily-backed stock briefing tool. The code uses Tavily credentials and Node.js only — nothing requests unrelated cloud credentials or surprising system access.
Instruction Scope
The runtime script invokes a separate script at ~/.openclaw/skills/tavily-search/scripts/search.mjs via child_process.execSync to perform searches. This is coherent if the author intended to reuse a local 'tavily-search' skill, but SKILL.md does not document this dependency. The use of execSync with a constructed command line (including user-provided query text) exposes potential command-line injection risks if inputs are not controlled; inputs are not explicitly sanitized in the script.
Install Mechanism
There is no install spec (instruction-only plus one JS script included). Nothing is downloaded from external URLs or written to nonstandard locations during install, which is low-risk from an install mechanism perspective.
Credentials
Only TAVILY_API_KEY is required and declared as the primary credential, which is proportional to the described functionality. The script does read HOME to locate another skill, but it does not request additional secrets or unrelated environment variables.
Persistence & Privilege
always is false and the skill does not attempt to alter other skills or system-wide configuration. It does execute a local script but does not request permanent presence or elevated platform privileges.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install investment-brief-generator - After installation, invoke the skill by name or use
/investment-brief-generator - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
Update: Improved documentation and examples
v1.0.0
初始版本：支持个股分析和市场简报生成，基于 Tavily AI 搜索
Metadata
Frequently Asked Questions
What is 智能投资简报生成器?
股票分析 AI 工具 | 智能投资简报生成器 - 自动生成个股分析报告、市场热点追踪、持仓监控。支持 A股/港股/美股，实时股价查询，技术分析，研报生成。一键生成专业 Markdown 投资报告。 It is an AI Agent Skill for Claude Code / OpenClaw, with 206 downloads so far.
How do I install 智能投资简报生成器?
Run "/install investment-brief-generator" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is 智能投资简报生成器 free?
Yes, 智能投资简报生成器 is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does 智能投资简报生成器 support?
智能投资简报生成器 is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created 智能投资简报生成器?
It is built and maintained by ryan-wuxl (@ryan-wuxl); the current version is v1.0.1.
More Skills