← 返回 Skills 市场

Etf Assistant 1.0.1

Name: Etf Assistant 1.0.1
Author: squally2k

作者 squally2k · GitHub ↗ · v1.0.0

cross-platform ⚠ suspicious

878

总下载

当前安装

版本数

在 OpenClaw 中安装

/install etf-assistant-1-0-1

功能描述

ETF投资助理 / ETF Investment Assistant - 查询行情、筛选ETF、对比分析、定投计算。支持沪深300、创业板、科创50、纳指等主流ETF。

使用说明 (SKILL.md)

ETF投资助理 / ETF Investment Assistant

一个专业的ETF投资助手，帮助你查询ETF行情、筛选投资标的、对比分析、计算定投收益。

A professional ETF investment assistant for querying ETF quotes, screening investment targets, comparative analysis, and DCA calculation.

功能特性 / Features

📊 ETF列表 / ETF List - 常用ETF代码速查
- Quick reference for commonly used ETF codes
💰 实时行情 / Real-time Quotes - 查询ETF当前价格和涨跌
- Query current ETF prices and changes
🔥 热门ETF / Hot ETFs - 推荐热门投资标的
- Recommend popular investment targets
🔍 搜索ETF / Search ETF - 按名称或代码搜索
- Search by name or code
📈 对比分析 / Comparison - 对比两只ETF表现
- Compare performance of two ETFs
🧮 定投计算器 / DCA Calculator - 计算定投收益
- Calculate Dollar-Cost Averaging returns
📋 投资摘要 / Summary - 主流ETF分类介绍
- Introduction to mainstream ETF categories

使用方法 / Usage

1. 查看ETF列表 / View ETF List

etf-assistant list

2. 查询行情 / Query Quotes

# 查询沪深300ETF
# Query CSI 300 ETF
etf-assistant price 510300

# 查询创业板ETF
# Query ChiNext ETF
etf-assistant price 159915

3. 热门ETF推荐 / Hot ETF Recommendations

etf-assistant hot

4. 搜索ETF / Search ETF

# 按名称搜索
# Search by name
etf-assistant search 沪深

# 按代码搜索
# Search by code
etf-assistant search 510300

5. 对比ETF / Compare ETFs

etf-assistant compare 510300 159915

6. 定投计算 / DCA Calculation

# 每月定投1000元，定投10年
# Monthly investment of 1000 CNY for 10 years
etf-assistant calc 510300 1000 10

7. 投资摘要 / Investment Summary

etf-assistant summary

常用ETF代码 / Common ETF Codes

代码 / Code	名称 / Name	类型 / Type
510300	沪深300ETF	宽基指数 / Broad Index
510500	中证500ETF	宽基指数 / Broad Index
159915	创业板ETF	宽基指数 / Broad Index
159919	科创50ETF	科创板 / STAR Market
159941	纳指ETF	海外指数 / Overseas Index
513100	恒生ETF	港股指数 / HK Stock Index
510880	红利ETF	Smart Beta
159997	芯片ETF	行业主题 / Sector Theme
159995	新能源车ETF	行业主题 / Sector Theme
512170	医疗ETF	行业主题 / Sector Theme

投资建议 / Investment Tips

新手入门 / Beginners: 推荐沪深300ETF (510300)，覆盖A股核心蓝筹
- Recommend CSI 300 ETF (510300), covering A-share core blue chips
科技创新 / Tech Innovation: 关注科创50ETF (159919) 或芯片ETF (159997)
- Focus on STAR 50 ETF (159919) or Chip ETF (159997)
分散投资 / Diversification: 组合配置沪深300 + 港股 + 海外ETF
- Portfolio: CSI 300 + HK + Overseas ETFs
稳健收益 / Steady Returns: 红利ETF (510880) 提供稳定股息
- Dividend ETF (510880) provides stable dividends

数据来源 / Data Source

Yahoo Finance 实时行情
Free API, no API Key required

注意事项 / Notes

⚠️ 投资有风险，入市需谨慎 ⚠️ Investment involves risk, invest cautiously

⚠️ 历史收益不代表未来表现 ⚠️ Past performance does not guarantee future results

⚠️ 仅供参考，不构成投资建议 ⚠️ For reference only, not investment advice

安全使用建议

This skill's code matches its description and only queries Yahoo Finance, but there are a few things to check before installing: 1) The bundled script uses curl, python3 and bc — make sure those are available in your environment (the package metadata does not declare them). 2) The skill source/homepage is unknown and registry metadata versions mismatch — prefer skills with a verifiable source or repository. 3) Network access to query1.finance.yahoo.com is required; if you restrict outgoing network traffic, run it in a sandbox first. 4) Review the included etf-assistant.sh yourself (it's short and readable) if you are concerned. Overall the behavior is coherent with an ETF assistant, but the undeclared runtime dependencies and missing source metadata make this package suspicious rather than clearly benign.

功能分析

Type: OpenClaw Skill Name: etf-assistant-1-0-1 Version: 1.0.0 The `etf-assistant.sh` script contains multiple shell injection vulnerabilities. User inputs for ETF codes in `cmd_price` and `cmd_compare` are directly interpolated into `curl` commands, and the search keyword in `cmd_search` is directly interpolated into a `grep` command, without proper sanitization. This allows for potential remote code execution if an attacker provides specially crafted input. While these are critical vulnerabilities, there is no clear evidence of intentional malicious behavior (e.g., data exfiltration to unauthorized endpoints, backdoor installation) by the script itself, thus classifying it as suspicious rather than malicious.

能力评估

ℹ Purpose & Capability

Name, description, SKILL.md and the included shell script all implement ETF lookup, screening, comparison and DCA calculation using Yahoo Finance — behavior is consistent with the stated purpose. Minor metadata mismatches: registry metadata/version (1.0.0) differs from _meta.json (1.0.1) and the skill source/homepage are unknown.

✓ Instruction Scope

SKILL.md and the script confine themselves to ETF-related tasks (listing, querying Yahoo Finance, simple local calculations). The instructions do not read unrelated files, request secrets, or send data to unfamiliar endpoints; network calls are limited to Yahoo Finance endpoints.

✓ Install Mechanism

No install spec (instruction-only with a bundled script). No downloads or archive extraction. The code is included in the package; nothing external is installed by the skill itself.

⚠ Credentials

The package declares no required binaries/env vars, yet the provided etf-assistant.sh script relies on external commands: curl, python3, and bc (and uses standard POSIX shell). Those runtime dependencies are reasonable for the task but were not declared — an omission that can cause surprises at runtime and should be documented/verified.

✓ Persistence & Privilege

Skill does not request persistent system presence (always:false) and does not modify other skill or system configurations. It can be invoked autonomously per platform default, which is normal.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install etf-assistant-1-0-1
安装完成后，直接呼叫该 Skill 的名称或使用 /etf-assistant-1-0-1 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

etf-assistant 1.0.0 initial release: - Provides a command-line ETF investment assistant for quote queries, screening, comparison, and DCA calculations. - Supports major ETFs including CSI 300, ChiNext, STAR 50, Nasdaq, and others. - Features include real-time quotes, ETF code lookup, investment screening, performance comparison, and return calculator. - Offers investment tips, ETF lists, and mainstream category summaries. - Data sourced from Yahoo Finance; no API key required.

元数据

Slug etf-assistant-1-0-1

版本 1.0.0

许可证 —

累计安装 2

当前安装数 2

历史版本数 1

常见问题