← 返回 Skills 市场
117
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install stock-10d
功能描述
A股股票十维深度分析（1000分制）。当用户输入「查询股票 <代码>」「分析股票 <代码>」「股票 <代码>」时自动触发。包含：基本信息、财务数据、技术分析、资金流向、市场情绪、风险提示、机构持仓、估值分析、股东结构、消息面，最后输出综合评分和投资建议。
安全使用建议
Do not enable or run this skill until the proxy requirement is resolved. The mandatory hard-coded SOCKS5 proxy (socks5://admin:[email protected]:3333) is the primary red flag: it gives the proxy operator access to every request and response and can be used to log, alter, or exfiltrate data. Ask the author why a private proxy with embedded credentials is necessary; require that any proxy be optional and provided by the user (via a declared environment variable) or remove it entirely. Verify the data endpoints (e.g., correct eastmoney hostnames) and prefer using official public APIs or your own trusted network path. If you must test the skill, run it in a network-restricted sandbox and monitor outbound connections, or request the skill source so you can remove/replace the proxy string before use.
功能分析
Type: OpenClaw Skill
Name: stock-10d
Version: 1.0.0
The skill 'stock-analysis-10d' (in SKILL.md) mandates the use of a specific SOCKS5 proxy (54.46.125.68:3333) with hardcoded credentials (admin:admin985) for all network operations. Furthermore, it instructs the agent to fetch data from 'push2.estmoney.com', which is a suspicious typo-squatted domain of the legitimate 'eastmoney.com'. These requirements facilitate Man-in-the-Middle (MITM) attacks and the harvesting of user stock queries through untrusted infrastructure.
能力评估
Purpose & Capability
The skill's stated purpose (10-dimension A-share analysis using public market data) is coherent with the curl-based API calls to market-data endpoints. However, the SKILL.md mandates routing every request through a specific external SOCKS5 proxy (socks5://admin:[email protected]:3333). Needing a private proxy with embedded credentials is not required to fetch public market data and is not justified by the stated purpose.
Instruction Scope
The runtime instructions explicitly require the agent to run curl commands with the hard-coded proxy for every API call. That gives the proxy operator full visibility into requests/responses and the ability to modify traffic. The SKILL.md otherwise stays on-task (fetch market data, compute scores), but the mandatory proxy requirement expands the risk surface. There are also minor inconsistencies in hostnames (e.g., 'push2.estmoney.com' vs expected 'eastmoney') which could be typos or intentional obfuscation.
Install Mechanism
This is an instruction-only skill with no install spec and no code files, which lowers the risk from arbitrary code being written to disk. There is no package download or installation step.
Credentials
No environment variables or credentials are declared, but the SKILL.md embeds credentials inside the proxy URL. Hard-coded third-party credentials are disproportionate for a read-only public-data analysis task and effectively request trust in an external operator. This is equivalent to asking the user to hand traffic and data to an unknown remote operator.
Persistence & Privilege
The skill does not request persistent presence (always:false), does not modify other skills or system-wide config, and does not require elevated privileges. Autonomous invocation is enabled by default but is not in itself a problem here.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install stock-10d - 安装完成后，直接呼叫该 Skill 的名称或使用
/stock-10d触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release
元数据
常见问题
A股十维分析 是什么？
A股股票十维深度分析（1000分制）。当用户输入「查询股票 <代码>」「分析股票 <代码>」「股票 <代码>」时自动触发。包含：基本信息、财务数据、技术分析、资金流向、市场情绪、风险提示、机构持仓、估值分析、股东结构、消息面，最后输出综合评分和投资建议。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 117 次。
如何安装 A股十维分析？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install stock-10d」即可一键安装，无需额外配置。
A股十维分析 是免费的吗？
是的，A股十维分析 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
A股十维分析 支持哪些平台？
A股十维分析 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 A股十维分析？
由 hsyhph（@hsyhph）开发并维护，当前版本 v1.0.0。
推荐 Skills