← 返回 Skills 市场
93
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install stock-daily-analysis-v2
功能描述
LLM驱动的每日股票分析系统完整版 v2.1。支持A股/港股/美股智能分析、决策仪表盘、大盘复盘、板块分析、Agent问股、多渠道推送。提供技术面+基本面综合分析。触发词:股票分析、分析股票、每日分析、大盘复盘、板块分析、问股。
安全使用建议
This skill appears to be what it claims: a local Python-based stock analysis tool that fetches market data, optionally calls an LLM provider, and can push reports to configured channels. Before installing or enabling it:
- Review and edit config.example.json carefully; only add API keys/webhooks you trust and keep config.json private (it's stored on disk).
- Only enable push channels (Feishu, Telegram, Discord, email) if you trust those webhook URLs/tokens — the skill will send report data to them.
- Consider running the skill in an isolated environment or container and avoid placing high-privilege credentials (e.g., cloud admin keys) into config.json.
- Inspect notifier and update scripts (setup.sh / update.sh / run.sh) before executing them; the package does not include an automated installer but does provide shell scripts — running arbitrary scripts can change your system.
- If you plan to use the AI features, supply an API key for only the provider you intend to use and monitor usage.
If you want extra assurance, request the full contents of the remaining truncated files (setup.sh, notifier.py, update.sh, run.sh, and any omitted modules) so they can be reviewed for any hidden network endpoints or shell commands.
功能分析
Type: OpenClaw Skill
Name: stock-daily-analysis-v2
Version: 2.1.0
The skill bundle implements a complex stock analysis system but contains high-risk execution patterns. Specifically, `scripts/setup.sh` clones and executes code from an external GitHub repository (ZhuLinsen/daily_stock_analysis), which introduces a significant supply chain risk. Additionally, `scripts/market_data_bridge.py` utilizes `subprocess.run` to execute external Python scripts based on paths defined in the configuration, creating a potential vector for arbitrary code execution. While these features support the stated functionality, the combination of external code fetching and subprocess execution warrants a suspicious classification.
能力评估
Purpose & Capability
The name/description (daily stock analysis, multi-market, AI recommendations, multi-channel push) match the code and runtime instructions. The skill relies on akshare, optional OpenAI/Gemini, and push webhooks — all sensible for the stated functionality. One minor inconsistency: the registry metadata declares no required config paths or credentials, but the SKILL.md and code expect a local config.json (copied from config.example.json) containing API keys/webhook tokens; this is a documentation/metadata omission rather than malicious behavior.
Instruction Scope
SKILL.md instructs installing Python dependencies, creating/editing config.json, and running the included scripts or scheduling daily_push via cron. The runtime instructions and code only reference market data, AI provider endpoints (via provided API key), and configured push endpoints. I found no instructions that ask the agent to read unrelated system files or transmit arbitrary local data.
Install Mechanism
There is no automated install spec; SKILL.md asks the user to pip install listed dependencies (akshare, pandas, numpy, requests, openai, yfinance). Dependencies come from PyPI (no arbitrary downloads or extracted archives). This is a low-to-moderate risk pattern but proportionate to the skill.
Credentials
The skill does not declare required environment variables in the metadata, but it expects API keys and webhook tokens to be placed into config.json (ai.api_key, tushare_token, feishu_webhook, telegram_token, email_password, etc.). These credentials are proportional to the functions (AI calls, market data, pushes). The code also respects HTTPS_PROXY for Gemini calls. Users should be aware that enabling push channels requires adding tokens/passwords to config.json stored on disk.
Persistence & Privilege
always is false and the skill does not request elevated platform privileges. It will run network requests when invoked (including autonomous invocation, which is the platform default). The skill does not attempt to modify other skills or global agent settings.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install stock-daily-analysis-v2 - 安装完成后,直接呼叫该 Skill 的名称或使用
/stock-daily-analysis-v2触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v2.1.0
v2.1: Full version - Fundamental analysis, Market review, Sector analysis, Agent query, Multi-channel push, Concurrent analysis
元数据
常见问题
Daily Stock Analysis v2.1 是什么?
LLM驱动的每日股票分析系统完整版 v2.1。支持A股/港股/美股智能分析、决策仪表盘、大盘复盘、板块分析、Agent问股、多渠道推送。提供技术面+基本面综合分析。触发词:股票分析、分析股票、每日分析、大盘复盘、板块分析、问股。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 93 次。
如何安装 Daily Stock Analysis v2.1?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install stock-daily-analysis-v2」即可一键安装,无需额外配置。
Daily Stock Analysis v2.1 是免费的吗?
是的,Daily Stock Analysis v2.1 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
Daily Stock Analysis v2.1 支持哪些平台?
Daily Stock Analysis v2.1 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Daily Stock Analysis v2.1?
由 same1317(@same1317)开发并维护,当前版本 v2.1.0。
推荐 Skills