Stock Ai Analyzer

A股股票投研分析方法论。当用户要求按股票名称或代码分析中国A股、判断公司基本面/技术面/估值/财务质量/股东结构/主营业务、做专题研究（如AI、半导体、新能源关联度）、从个股推演行业趋势、做竞争格局分析或风险排查，或基于Tushare/公开市场数据生成股票分析时使用。用户提问形式包括"帮我分析XX股票""XX的基...

This skill's behavior is generally coherent with its stated purpose (A‑share research using Tushare and public reports), but the metadata is incomplete and you should take a few precautions before installing: - Provide a TUSHARE_TOKEN: The skill expects a TUSHARE_TOKEN (env var or a .env file in the current working directory). Add this token only if you trust the skill and store it securely. - Prepare dependencies: The included script requires Python packages (tushare, requests, PyPDF2). The skill provides no install steps; consider installing these in an isolated virtualenv or sandbox before use. - File writes: The fetcher can download PDF reports to a local directory (e.g., data/reports). Expect files to be written to the agent's working directory when you request report downloads. - Metadata mismatch: The registry failing to declare required env vars/dependencies is a packaging oversight and increases operational risk. Prefer skills that declare required credentials and dependencies explicitly. - Review code if concerned: The fetcher is short and readable; if you have doubts, inspect scripts/data_fetcher.py yourself (it validates CNInfo hosts and avoids arbitrary remote hosts). If you lack the ability to review code, run the skill in a restricted environment (container or VM) and avoid providing high-privilege credentials. If these points are acceptable and you sandbox the execution, the skill appears usable for the stated task. If you need higher assurance, ask the publisher to update the metadata to declare TUSHARE_TOKEN and required Python packages and to provide an install script or requirements.txt.

Type: OpenClaw Skill Name: stock-ai-analyzer Version: 2.2.2 The stock-ai-analyzer skill bundle is a legitimate tool for A-share market research. The Python script `scripts/data_fetcher.py` is well-implemented, using the Tushare API and CNInfo (巨潮资讯) for data retrieval with appropriate security measures such as hostname validation for external URLs and filename sanitization for PDF downloads. The `SKILL.md` file provides detailed, task-aligned instructions for the AI agent without any evidence of prompt injection or malicious intent.