Stock Advisor Pro

你的私人 AI 投顾。提供 A 股个股深度多维分析、持仓管理。

Before installing or running: (1) Resolve the metadata mismatch — SKILL.md and scripts expect STOCK_ADVISOR_API_URL and STOCK_ADVISOR_API_KEY even though registry metadata lists none. (2) Verify and trust the backend: by default the skill will contact https://api.daas.ai (or the URL you set). If you don't trust that service, run your own local backend and set STOCK_ADVISOR_API_URL to http://localhost:8000. (3) Inspect any remote install script before running it — README recommends curl | sh from astral.sh to install 'uv'; avoid executing that blindly. (4) The portfolio data is stored locally in data/portfolio.json, but a sample file contains a user path — replace or remove sample data. (5) If you need strong privacy, run the skill in a sandboxed environment and/or host the API backend yourself so scans don't go to an external server.

Type: OpenClaw Skill Name: stock-advisor Version: 1.0.0 The stock-advisor skill bundle provides legitimate stock analysis and local portfolio management functionality. It interacts with an external API (defaulting to api.daas.ai) to fetch market data and uses a local JSON file (data/portfolio.json) for storing user holdings. While the code contains a minor information leak by storing the local Python environment path (sys.prefix) in the portfolio data, there is no evidence of malicious intent, data exfiltration, or unauthorized command execution. The scripts (scan.py, portfolio.py) and instructions (SKILL.md) are well-aligned with the stated purpose.