← 返回 Skills 市场

🔥 DeepStock - A股量化投研助手 | 免费提供K线数据 · 技术指标 · 股东人数 · 官方公告解析

Name: 🔥 DeepStock - A股量化投研助手 | 免费提供K线数据 · 技术指标 · 股东人数 · 官方公告解析
Author: vcvycy

作者 Jianfeng Chen · GitHub ↗ · v1.0.1 · MIT-0

cross-platform ⚠ suspicious

126

总下载

当前安装

版本数

在 OpenClaw 中安装

/install deepstock

功能描述

A股量化投研助手 | 免费提供K线数据 · 技术指标 · 股东人数 · 官方公告解析。

使用说明 (SKILL.md)

DeepStock API

HTTP HOST: http://60.205.179.76:8000

接口清单

股票基础信息

`GET /api/stock/basic/name/{name}`

根据名称查询股票基础信息, 可以获取到ts_code等。

GET /api/stock/basic/name/贵州茅台

`GET /api/stock/search`

搜索股票(代码、名称、行业)。

参数	类型	说明
q	string	搜索关键词(必填)

GET /api/stock/search?q=茅台

日线数据

`GET /api/stock/daily/{ts_code}`

获取股票日线数据(前复权)，包含价格、均线、市盈率(pe)、市净率(pb)等指标

参数	类型	说明
start_date	string	开始日期 YYYYMMDD(可选)
end_date	string	结束日期 YYYYMMDD(可选)
limit	int	返回条数(默认100，最大5000)

# 获取最近30天日线
GET /api/stock/daily/600519.SH?limit=30

# 获取指定日期范围
GET /api/stock/daily/600519.SH?start_date=20250101&end_date=20250328

股东人数

`GET /api/stock/holder/{ts_code}`

获取股东人数变化历史。

参数	类型	说明
limit	int	返回条数(默认10，最大100)

GET /api/stock/holder/600519.SH?limit=10

返回: [{"ts_code": "600519.SH", "ann_date": "20250813", "holder_num": 220658, ...}, ...] ann_date: 公告发布时间 holder_num: 股东人数

公告搜索

`GET /api/ann/recent/{stock_name}`

获取股票公告列表，会自动下载 PDF 到本地。

参数	类型	说明
days	int	天数(可选，不传则获取所有历史)
max_pages	int	最多获取页数(每页30条，默认3，最大100)

# 获取最近30天公告
GET /api/ann/recent/贵州茅台?days=30

# 获取所有历史公告(最多90条)
GET /api/ann/recent/贵州茅台

{
  "success": true,
  "data": [
    {
      "title": "贵州茅台关于高级管理人员被实施留置的公告",
      "time": 1773417600000,
      "date": "2026-03-14",
      "sec_name": "贵州茅台",
      "announcement_id": "1225009431",
      "pdf_path": "/path/to/xxx.pdf"
    }
  ]
}

`GET /api/ann/search`

搜索股票公告(支持关键词)。

参数	类型	说明
stock_name	string	股票名称或代码(必填)
keyword	string	公告关键词(可选，如"年报"、"季报")
days	int	天数(可选，不传则获取所有历史)
max_pages	int	最多获取页数(默认10)

# 搜索年报
GET /api/ann/search?stock_name=贵州茅台&keyword=年报

# 搜索所有历史季报
GET /api/ann/search?stock_name=贵州茅台&keyword=季报

`GET /api/ann/content`

读取公告 PDF 正文内容。

参数	类型	说明
pdf_path	string	PDF文件路径(必填)，使用公告接口返回的 `pdf_path`

GET /api/ann/content?pdf_path=/path/to/贵州茅台_关于xxx的公告_1225009431.pdf

{
  "success": true,
  "data": [
    {
      "success": true,
      "file_path": "/path/to/xxx.pdf",
      "file_name": "xxx.pdf",
      "file_size": 71386,
      "page_count": 1,
      "text_content": "证券代码：600519 证券简称：贵州茅台...",
      "error_message": ""
    }
  ]
}

股票代码格式

上海证券交易所: XXXXXX.SH (如 600519.SH)
深圳证券交易所: XXXXXX.SZ (如 000001.SZ)

日期格式

所有日期参数使用 YYYYMMDD 格式，如 20250328。

公告 PDF 保存位置

默认保存在 $STOCK_HOME/run/ann_downloads/ 目录下，按股票名称和日期组织。

安全使用建议

This skill appears to be a stock-data/announcement helper, but exercise caution before enabling it: 1) The API is at an unknown raw IP over plain HTTP (no TLS) — network traffic is unencrypted and the host identity is unclear. 2) The skill will download announcement PDFs to your filesystem and references $STOCK_HOME even though that env var is not declared — set $STOCK_HOME to a dedicated sandbox directory if you proceed. 3) Remote PDFs can contain malicious content or lead to unexpected file writes; run the skill in a network- and filesystem-restricted sandbox and inspect downloads before opening. 4) Prefer a version hosted on a named, verifiable domain or request the publisher/source code and HTTPS support. 5) Avoid enabling autonomous invocation until you trust the endpoint; ask the publisher for provenance, TLS, and details about what the /api/ann/recent endpoint returns (URLs vs server-side paths) and how downloading is performed.

功能分析

Type: OpenClaw Skill Name: deepstock Version: 1.0.1 The 'deepstock' skill provides stock market data and announcement analysis via a remote API (60.205.179.76). It includes functionality to download PDF announcements and read their content using a 'pdf_path' parameter in the '/api/ann/content' endpoint, as described in SKILL.md. This design presents a potential path traversal vulnerability, as the agent is instructed to use file paths that could potentially be manipulated to access unauthorized files. While these capabilities are plausibly related to the skill's stated purpose, the reliance on raw file paths and remote downloads to a local directory ($STOCK_HOME) constitutes a high-risk pattern.

能力评估

ℹ Purpose & Capability

The SKILL.md describes stock data, indicators, holder counts and announcement PDF handling — so the declared purpose matches the endpoints. However the API host is a raw IP (http://60.205.179.76:8000) rather than a named/trusted domain and the skill promises automatic downloading of PDFs to a local path, which is a capability that has additional implications not reflected in the metadata.

⚠ Instruction Scope

Instructions tell the agent to call remote HTTP endpoints and to download announcement PDFs to a local directory. The doc refers to a $STOCK_HOME/run/ann_downloads/ default but the skill declares no required env var for $STOCK_HOME. Downloading remote files and writing them locally is outside the simple 'query API' model and can expose the agent environment or filesystem to untrusted content.

ℹ Install Mechanism

No install spec or code files (instruction-only), which minimizes file-write risk. However the runtime behavior requires network communication with an unknown host at a raw IP over plain HTTP (no TLS), increasing risk of eavesdropping or MITM; this should be considered an operational risk even though nothing is installed.

⚠ Credentials

Declared requirements list no env vars, yet SKILL.md references $STOCK_HOME as the default PDF save location. This mismatch is an undeclared environment dependency and may cause the skill to write files to unexpected locations. No credentials are requested, which aligns with the stated purpose, but the lack of TLS and undeclared local path are notable.

✓ Persistence & Privilege

The skill is not always-enabled and has no install actions or system-wide configuration changes. It does not request persistent privileges in the metadata.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install deepstock
安装完成后，直接呼叫该 Skill 的名称或使用 /deepstock 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.1

- Updated documentation to emphasize main API endpoints and simplify interface listing. - Added HTTP host information for API usage. - Removed detailed database schema and some internal descriptions for brevity. - Clarified key parameters and return formats for all endpoints. - No code or functional changes detected. Documentation update only.

v1.0.0

DeepStock API 1.0.0 - 提供基于本地SQLite的股票数据库及公告搜索API，覆盖A股主流信息查询。 - 支持股票基本信息、列表、日线行情、前复权数据、日行情(PE、PB等)、股东人数变化历史与最新数据查询。 - 覆盖公告检索、公告PDF下载与全文内容提取。 - 提供灵活多参数查询(如行业、日期、关键词筛选)。 - 所有API返回结构化JSON，简明易用，接口文档完备。 - 新增健康检查接口保障服务可用性。

元数据

Slug deepstock

版本 1.0.1

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 2

常见问题