Stock Selecter

统一选股技能包，整合14种策略（ROE筛选、MACD底背离、高股息、低估值、 费雪成长股、长期低位、近期放量、趋势分析、K线形态、布林带下轨、筹码集中、 现金流质量、北向资金、股东增持、分析师目标价），支持单策略、多策略组合筛选。 触发词（精准触发，覆盖明确选股意图）： 按策略名：ROE选股、ROE筛选、MACD...

This package largely does what it says (a multi-strategy stock screener) and requires installing Python dependencies and supplying a Tushare token. Before installing or running it: 1) Be aware you must provide a TUSHARE token (either set environment variable TUSHARE_TOKEN or put it in config.json) — the registry metadata omits this requirement, so double-check you supply it. 2) The code currently posts the token to http://api.tushare.pro (plain HTTP). That can expose your token in transit; prefer to change the endpoint to HTTPS (https://api.tushare.pro) or otherwise confirm the transport is secure before using a real token. 3) Review output_dir default (Desktop) and change it if you don't want results saved to that location. 4) Install dependencies in an isolated environment (virtualenv) and scan the provided files yourself for any hardcoded endpoints or secrets. If you need higher assurance, ask the publisher to (a) correct the metadata to declare the required env var, and (b) update the code to use HTTPS and document the exact endpoints used.

Type: OpenClaw Skill Name: stock-selecter Version: 3.3.2 The stock-selecter skill bundle is a legitimate and well-structured A-share stock screening tool. It integrates 14 distinct financial and technical strategies (such as ROE, MACD, and Northbound Flow) using data from the Tushare Pro API. The code follows its stated purpose, implementing features like concurrent execution for technical analysis and interactive HTML report generation. No evidence of malicious intent, data exfiltration, or unauthorized system access was found; the tool responsibly handles API tokens and includes rate-limiting protections. Minor security observations, such as the use of HTTP for API calls and dynamic path loading in `utils/loader.py`, are common in this context and do not indicate malice.