全方位智能股票分析v4

A股/港股/美股/ETF 全方位智能分析助手 v4.0。 核心特点：①结论先行②信号明确果断③盘中实时扫描④自动读取 ~/Desktop/股票知识库/。 数据来源：tushare realtime_quote（实时五档盘口）、akshare（资金流向/龙虎榜/研报）、yfinance（美股/港股）、Web搜索（消...

Before installing or running this skill, consider the following: - The skill expects to use tushare (it reads TUSHARE_TOKEN) but the token is not declared in the metadata; do not paste your TUSHARE_TOKEN into an untrusted skill without confirmation. Ask the author to explicitly declare required env vars and justify them. - The description says it will automatically read ~/Desktop/股票知识库/. Confirm whether the skill will actually access that path and what it will read/send. If you keep private files there, don't allow automatic reading. - The skill will perform network requests (yfinance/akshare/tushare/Web search). Run it in a sandboxed environment if you are concerned about data exfiltration, and avoid supplying unrelated credentials. - Request that the maintainer: (1) list required environment variables (e.g., TUSHARE_TOKEN), (2) list any local paths the skill will read, and (3) provide a minimal install/run checklist. If you cannot get these clarifications, treat the skill as untrusted and avoid providing secrets or placing sensitive files in the referenced Desktop folder. - If you need to use it, consider creating a limited-purpose tushare token or running the analysis on a machine/user account that has no sensitive files on ~/Desktop.

Type: OpenClaw Skill Name: stock-analysis-cn-full Version: 4.0.0 The skill is a comprehensive stock analysis tool that utilizes legitimate financial libraries such as yfinance, tushare, and akshare. It is classified as suspicious because SKILL.md contains instructions for the agent to automatically read data from a specific local directory (~/Desktop/股票知识库/) and accesses an environment variable (TUSHARE_TOKEN) for API authentication. While these capabilities are plausibly aligned with the tool's stated purpose of providing data-backed financial advice, the automated access to the user's filesystem and sensitive tokens represents a high-risk behavior that could be exploited if not properly sandboxed.