A股股票预测助手

基于实时价格和技术指标，智能预测A股股票明日走势并生成详细分析报告与可视化图表供参考。

This skill appears to do what it says (generate A‑share technical predictions and charts) but contains several concerning implementation choices. Before installing or running: (1) be aware the skill will attempt to verify/charge users via https://skillpay.me and will call charge endpoints automatically — it may abort if payment fails; (2) the code contains a hardcoded billing API key (embedded secret) — treat this as insecure and potentially leaking your service account if reused; (3) the SKILL.md does not document the SKILLPAY_USER_ID environment variable used at runtime; (4) the predictor currently uses mocked data by default while a fetch_data function exists that would invoke a local kimi_finance module via subprocess and create temp files — confirm how real data is fetched and ensure the required kimi_finance package is trusted; (5) consider contacting the author for clarification, remove the hardcoded key, and test in an isolated environment (no sensitive accounts) before granting access or using it with real funds.

Type: OpenClaw Skill Name: shenmeng-a-stock-predictor Version: 1.0.0 The skill implements a custom monetization and billing layer in `payment.py` that makes external network requests to `https://skillpay.me` using a hardcoded API key, which is a high-risk practice for credential management and user privacy. Additionally, `stock_predictor.py` uses `subprocess.run` to execute the `kimi_finance` module and employs the insecure `tempfile.mktemp()` function for data handling. While these behaviors appear to support the stated functionality of a paid stock prediction service, the combination of external billing calls, hardcoded secrets, and sub-process execution warrants a suspicious classification.