← 返回 Skills 市场

ETF投资助理

Name: ETF投资助理
Author: franky0617

作者 franky0617 · GitHub ↗ · v1.0.1

cross-platform ⚠ suspicious

3838

总下载

当前安装

版本数

在 OpenClaw 中安装

/install etf-assistant

功能描述

ETF投资助理 / ETF Investment Assistant - 查询行情、筛选ETF、对比分析、定投计算。支持沪深300、创业板、科创50、纳指等主流ETF。

使用说明 (SKILL.md)

ETF投资助理 / ETF Investment Assistant

一个专业的ETF投资助手，帮助你查询ETF行情、筛选投资标的、对比分析、计算定投收益。

A professional ETF investment assistant for querying ETF quotes, screening investment targets, comparative analysis, and DCA calculation.

功能特性 / Features

📊 ETF列表 / ETF List - 常用ETF代码速查
- Quick reference for commonly used ETF codes
💰 实时行情 / Real-time Quotes - 查询ETF当前价格和涨跌
- Query current ETF prices and changes
🔥 热门ETF / Hot ETFs - 推荐热门投资标的
- Recommend popular investment targets
🔍 搜索ETF / Search ETF - 按名称或代码搜索
- Search by name or code
📈 对比分析 / Comparison - 对比两只ETF表现
- Compare performance of two ETFs
🧮 定投计算器 / DCA Calculator - 计算定投收益
- Calculate Dollar-Cost Averaging returns
📋 投资摘要 / Summary - 主流ETF分类介绍
- Introduction to mainstream ETF categories

使用方法 / Usage

1. 查看ETF列表 / View ETF List

etf-assistant list

2. 查询行情 / Query Quotes

# 查询沪深300ETF
# Query CSI 300 ETF
etf-assistant price 510300

# 查询创业板ETF
# Query ChiNext ETF
etf-assistant price 159915

3. 热门ETF推荐 / Hot ETF Recommendations

etf-assistant hot

4. 搜索ETF / Search ETF

# 按名称搜索
# Search by name
etf-assistant search 沪深

# 按代码搜索
# Search by code
etf-assistant search 510300

5. 对比ETF / Compare ETFs

etf-assistant compare 510300 159915

6. 定投计算 / DCA Calculation

# 每月定投1000元，定投10年
# Monthly investment of 1000 CNY for 10 years
etf-assistant calc 510300 1000 10

7. 投资摘要 / Investment Summary

etf-assistant summary

常用ETF代码 / Common ETF Codes

代码 / Code	名称 / Name	类型 / Type
510300	沪深300ETF	宽基指数 / Broad Index
510500	中证500ETF	宽基指数 / Broad Index
159915	创业板ETF	宽基指数 / Broad Index
159919	科创50ETF	科创板 / STAR Market
159941	纳指ETF	海外指数 / Overseas Index
513100	恒生ETF	港股指数 / HK Stock Index
510880	红利ETF	Smart Beta
159997	芯片ETF	行业主题 / Sector Theme
159995	新能源车ETF	行业主题 / Sector Theme
512170	医疗ETF	行业主题 / Sector Theme

投资建议 / Investment Tips

新手入门 / Beginners: 推荐沪深300ETF (510300)，覆盖A股核心蓝筹
- Recommend CSI 300 ETF (510300), covering A-share core blue chips
科技创新 / Tech Innovation: 关注科创50ETF (159919) 或芯片ETF (159997)
- Focus on STAR 50 ETF (159919) or Chip ETF (159997)
分散投资 / Diversification: 组合配置沪深300 + 港股 + 海外ETF
- Portfolio: CSI 300 + HK + Overseas ETFs
稳健收益 / Steady Returns: 红利ETF (510880) 提供稳定股息
- Dividend ETF (510880) provides stable dividends

数据来源 / Data Source

Yahoo Finance 实时行情
Free API, no API Key required

注意事项 / Notes

⚠️ 投资有风险，入市需谨慎 ⚠️ Investment involves risk, invest cautiously

⚠️ 历史收益不代表未来表现 ⚠️ Past performance does not guarantee future results

⚠️ 仅供参考，不构成投资建议 ⚠️ For reference only, not investment advice

安全使用建议

This skill appears coherent and focused on ETF lookups and simple calculations. Before installing: note that it runs a local shell script which expects standard tools (curl, python3, bc, grep/sed). It will make network requests to Yahoo Finance (public endpoints) to fetch quotes. It does not request any credentials or write system files. If you require strict offline or no-network operation, do not install. Also consider that minor bugs (e.g., small string-handling issues) may exist in the script, but there are no indications of malicious behavior.

功能分析

Type: OpenClaw Skill Name: etf-assistant Version: 1.0.1 The skill bundle is classified as suspicious due to a command injection vulnerability in the `etf-assistant.sh` script. Specifically, in the `cmd_price` and `cmd_compare` functions, user-provided ETF codes (`$code`, `$code1`, `$code2`) are directly interpolated into double-quoted strings within `$(...)` subshells. This allows an attacker to inject shell metacharacters (e.g., `;`, `&&`) to execute arbitrary commands on the agent's system, such as `etf-assistant price "510300; rm -rf /"`. While the skill's stated purpose is benign and the `SKILL.md` does not contain prompt injection, this vulnerability represents a high-risk capability that could be exploited for unauthorized actions.

能力评估

ℹ Purpose & Capability

The skill name/description (ETF queries, screening, DCA calc) aligns with the provided shell script and SKILL.md. Minor inconsistency: the package metadata declares no required binaries, but the script invokes external tools (curl, python3, bc, grep/sed/sort). These are common system tools and consistent with the stated functionality, but the metadata should have listed them.

✓ Instruction Scope

SKILL.md describes CLI commands that match the behavior implemented in etf-assistant.sh. Runtime instructions and code only fetch public market data from Yahoo Finance and perform local calculations/searches; they do not read arbitrary files, access credentials, or transmit data to unexpected endpoints.

✓ Install Mechanism

No install specification (instruction-only) and the shipped shell script is run locally. No downloads, package installs, or archive extraction are performed by the skill itself.

✓ Credentials

The skill requests no environment variables or credentials. It does make outbound requests to Yahoo Finance as documented in SKILL.md; no secrets are required or used.

✓ Persistence & Privilege

always:false (default) and there is no code that modifies other skills or system-wide configuration. The skill runs when invoked and does not request permanent elevated presence.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install etf-assistant
安装完成后，直接呼叫该 Skill 的名称或使用 /etf-assistant 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.1

更新为中英双语描述

v1.0.0

初始发布：支持ETF行情查询、筛选、对比、定投计算

元数据

Slug etf-assistant

版本 1.0.1

许可证 —

累计安装 14

当前安装数 12

历史版本数 2

常见问题