📈 A股每日快报自动生成 - 自动获取今日大盘行情、涨跌排名、热点板块，一键生成小红书/公众号文章，直接就能发。炒股懒人必备，每天省你半小时整理时间。

What to check before installing: - Verify Python is installed and comes from a trusted source; the skill calls the system 'python' and runs akshare (pip install akshare is required). Use a virtualenv or container to isolate that installation. - akshare fetches/scrapes public Chinese finance sites (Eastmoney, etc.); expect network access. If you must limit network or third-party access, run in a restricted environment. - The Node code uses child_process.execSync to run a Python -c string. Although the current code embeds a static Python snippet (no user input passed into the Python command), execSync increases risk if the skill is modified. Inspect scripts/daily-generator.js yourself; consider running it locally in a sandbox first. - The SKILL.md was flagged for hidden unicode control characters. View the file in a hex/raw editor or re-download from a trusted source to ensure no invisible characters are present that could affect LLM processing. - Author and homepage are unknown. If you need higher assurance, ask the author for provenance, or prefer a skill with a verifiable source (GitHub repo, maintainer identity). If you decide to proceed: install akshare in an isolated environment, inspect the code, and run one test invocation rather than enabling it for broad autonomous use.

Type: OpenClaw Skill Name: a-stock-daily-express Version: 1.0.0 The skill is a legitimate tool for generating A-share market reports for social media. It uses a Node.js script (scripts/daily-generator.js) to execute a hardcoded Python snippet that fetches financial data via the 'akshare' library. While it uses execSync to bridge Node.js and Python, the command string is constructed from static code and does not incorporate unsanitized user input, posing no immediate shell injection risk. The behavior aligns perfectly with the description in SKILL.md.