股票分析

股票综合分析，融合基本面分析、技术分析、量化与行为金融分析三大体系，为投资者提供多维度的选股和择时建议。当用户询问某只股票（给出股票代码或名称）、市场整体情况、个股看法、能否买入/卖出、选股建议时使用此技能。

This skill mostly does what it says (multi-discipline stock analysis) but its runtime instructions ask the agent to write files to a hard-coded Windows Downloads folder and to start a local Python HTTP server and a browser to produce PDFs. Before installing or enabling this skill: - Ask the author to remove the hard-coded path (D:\\Downloads\\) and instead require an explicit user-specified output directory at runtime. Hard-coded paths are brittle and may expose or overwrite local files. - Confirm whether the agent will actually be allowed to start local processes (python, browser). If you do not want the agent to run processes or write files on your machine, do not enable automatic PDF generation. - Request the skill metadata be updated to declare required binaries (e.g., python, a browser with headless/pdf support) so you can make an informed decision. - If you allow the feature, run the skill in a controlled environment (VM or sandbox) first to observe behavior, and ensure it does not open unexpected network ports or access files outside the intended folder. If you cannot get these clarifications or do not want the agent to execute local commands, treat this skill as untrusted and do not enable it with autonomy to run on your device.

Type: OpenClaw Skill Name: stock-analyst Version: 1.0.0 The skill instructions in SKILL.md require the agent to start a local Python HTTP server and use a browser to render HTML files from the 'D:\Downloads\' directory to generate PDF reports. While these actions are framed as part of the report generation process, programmatically launching network services and browser sessions on local files introduces significant security risks, such as potential local file exposure or serving as a network pivot, which warrants a suspicious classification despite the lack of clear malicious intent.