← 返回 Skills 市场
xyangryr-cyber

finance-daily-report

作者 xyangryr-cyber · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
257
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install finance-daily-report
功能描述
Generate a modular, configurable global finance daily report (全球财经日报). Default 9 modules. External LLM collectors. Output to chat (auto-chunked). Use when: u...
使用说明 (SKILL.md)

Finance Daily Report

First-time Setup (IM 引导)

When user mentions configuring daily auto-push for the first time (e.g., "配置日报", "每天推送日报"):

Step 1: Check existing cron jobs Run openclaw cron list --json to see if a finance-daily-report job already exists.

Step 2: Guide user interactively If no existing job, proactively offer to set up with a warm greeting to 汤汤:

"汤汤好!👋 我是许阳专门为你定制的财经日报助手。检测到你还没有设置每日日报推送,需要我帮你配置吗?只需告诉我你希望几点收到日报(例如:8:00),我来自动配置,每天准时把全球财经日报送到你这里 📰"

Step 3: Extract preferred time and register cron When user provides a time (e.g., "8 点", "08:00", "早上 8 点"):

  1. Parse the time (default 08:00 if ambiguous)
  2. Calculate trigger time = user time - 20 minutes (generation takes 5-10 min)
  3. Run openclaw cron add with the calculated cron expression

Example command (user wants 08:00 delivery, trigger at 07:40):

openclaw cron add \
  --name "finance-daily-report" \
  --description "每日全球财经日报自动生成与推送" \
  --cron "40 7 * * *" \
  --tz "Asia/Shanghai" \
  --message "生成今日全球财经日报" \
  --session main \
  --announce \
  --timeout-seconds 720

Step 4: Confirm setup Tell user:

"✅ 搞定啦汤汤!每天 ${DISPLAY_TIME} 准时推送财经日报,${TRIGGER_TIME} 开始生成(提前 20 分钟确保准时到)。随时说 '修改日报时间' 或 '停止日报推送' 来调整。"

Generate Report

Spawn a single subagent to execute the 3-phase workflow. This keeps all file reads and data processing out of the main conversation context.

sessions_spawn(
  task="""Execute the finance daily report workflow in:
~/.openclaw/skills/finance-daily-report/references/workflow.md

Base dir: ~/.openclaw/skills/finance-daily-report

Output: Return the final report markdown text for chat delivery.
Save files to: /root/.openclaw/workspace/finance-reports/YYYY-MM-DD.md""",
  runtime="subagent",
  mode="run",
  runTimeoutSeconds=600
)

Then sessions_yield(). When subagent returns, send its output to chat.

Module Management

Intent Command
新增模块 python3 ~/.openclaw/skills/finance-daily-report/scripts/manage_modules.py add --name "XX" --keywords "k1,k2" --prompt "..."
删除模块 ... remove --name "XX"
禁用模块 ... disable --name "XX"
启用模块 ... enable --name "XX"
列出模块 ... list
调整顺序 ... reorder --name "XX" --priority N

For add: generate 3-5 keywords (CN+EN with {date}) and a domain-specific collector prompt before calling.

安全使用建议
What to consider before installing: - This skill will call external LLM services (DashScope and a Volcengine endpoint) and expects API keys (DASHSCOPE_API_KEY, optional DOUBAO_API_KEY). The registry did not declare these required credentials — verify and only supply keys you trust for these services. - The provided setup script may append those API keys into your shell rc (e.g., ~/.bashrc or ~/.zshrc). If you don't want keys persisted to shell files, do not accept the automatic prompt; instead set keys in an isolated environment or container. - The skill will register a scheduled cron job via openclaw cron add to run daily and write report files into a workspace (scripts reference both $HOME paths and /root paths inconsistently). Confirm which user account and path will be used (avoid running as root if unnecessary). - The skill fetches data from many external websites and sends content to third-party LLM endpoints. Review the endpoints (coding.dashscope.aliyuncs.com and ark.cn-beijing.volces.com) and the privacy implications of sending scraped content to those services. - If you are not comfortable granting file-write/cron-modification/network egress, run this skill in an isolated environment (dedicated non-root user, container, or VM) and inspect/modify scripts before use. - Ask the author to: (1) explicitly declare required env vars and primary credential in registry metadata, (2) avoid automatically writing to shell RC (or at least prompt and produce a one-line instruction the user can run manually), and (3) unify workspace paths and document where files and cron jobs are created. - If you want help: I can extract the exact places the scripts write files and the exact HTTP endpoints they call, or produce a safe installation checklist (e.g., steps to run in a container and verify behavior) before you enable this skill.
功能分析
Type: OpenClaw Skill Name: finance-daily-report Version: 1.0.0 The bundle is a legitimate financial reporting tool designed to aggregate market data from sources like Trading Economics, Jin10, and CLS using external LLM APIs (Kimi and Doubao). The scripts (e.g., collect_and_structure.py and setup.sh) are well-documented and perform tasks consistent with the skill's purpose, such as environment configuration, data fetching, and report rendering. While the setup script modifies shell RC files to store API keys and the SKILL.md configures automated cron jobs, these actions are transparently presented to the user and necessary for the tool's functionality. No evidence of data exfiltration, malicious prompt injection, or unauthorized persistence was found.
能力评估
Purpose & Capability
The skill claims to use 'external LLM collectors' and the code indeed calls external model endpoints (DashScope / Volcengine). That capability is consistent with generating structured finance reports. However the registry metadata lists no required environment variables or primary credential while multiple scripts rely on DASHSCOPE_API_KEY and DOUBAO_API_KEY; this omission is an incoherence that reduces transparency.
Instruction Scope
Runtime instructions and scripts do more than text-generation: they spawn a subagent, read and write skill/workspace files, call many external URLs, call external LLM APIs, and the setup script will read and may append API keys into the user's shell RC. The SKILL.md also instructs automatic cron registration via openclaw cron add. These actions go beyond pure formatting/reporting and involve modifying user environment and network egress.
Install Mechanism
There is no external install spec or arbitrary download; the skill is instruction-plus-local-scripts only. No remote code fetch/install step detected in the manifest. The risk comes from what the provided scripts do at runtime, not from an installer.
Credentials
Although registry metadata claims 'required env vars: none', the scripts expect DASHSCOPE_API_KEY (primary) and optionally DOUBAO_API_KEY, and they attempt to read/write shell RC files to persist keys. The skill also assumes/uses workspace paths (defaults include /root/.openclaw/workspace and references to ~/openclaw-workspace) — inconsistent and potentially privileged. Requesting LLM API keys and writing them into shell config is sensitive and not declared.
Persistence & Privilege
The setup script and SKILL.md will register an automated OpenClaw cron job to run daily and the skill's manage scripts write/modify the workspace config file. While always:false (not force-enabled), the skill modifies user cron and shell RC (persistent system/user state) and will run autonomously per schedule; this elevates blast radius if misused.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install finance-daily-report
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /finance-daily-report 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
finance-daily-report version 1.0.0 - Initial release providing modular, configurable global finance daily report generation. - Supports interactive first-time setup for daily auto-push, including cron job registration and time parsing. - Handles chat-based module management: add, remove, enable, disable, list, and reorder report modules. - Integrates subagent workflow execution for report compilation and delivery. - Not intended for real-time trading, individual stock picks, or investment advice.
元数据
Slug finance-daily-report
版本 1.0.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

finance-daily-report 是什么?

Generate a modular, configurable global finance daily report (全球财经日报). Default 9 modules. External LLM collectors. Output to chat (auto-chunked). Use when: u... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 257 次。

如何安装 finance-daily-report?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install finance-daily-report」即可一键安装,无需额外配置。

finance-daily-report 是免费的吗?

是的,finance-daily-report 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

finance-daily-report 支持哪些平台?

finance-daily-report 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 finance-daily-report?

由 xyangryr-cyber(@xyangryr-cyber)开发并维护,当前版本 v1.0.0。

💬 留言讨论