← 返回 Skills 市场
85
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install stock-fundamental-analysis
功能描述
对上市公司进行深度基本面分析，包括财务健康度评估、估值分析、成长性分析、行业对标、财报解读，输出结构化投研报告
安全使用建议
Do not install or enable this skill yet. Key concerns: (1) SKILL.md lists several helper scripts (health_checker.py, growth_analyzer.py, industry_comparator.py, report_parser.py, shareholder_tracker.py) that are missing from the package — ask the author to supply those files or update the instructions. (2) financial_fetcher.py appends a relative 'toc-trading/src' path and imports StockDataAdapter from there; confirm where 'toc-trading' comes from, whether it will be present at runtime, and inspect that adapter's code for how it handles your STOCK_DATA_API_KEY and remote endpoints. (3) Verify the provenance of the package (source/homepage unknown) and ensure the data provider is trusted and licensed. If you must test this skill, do so in an isolated environment, monitor network calls, and avoid providing high‑privilege or long‑lived credentials until you confirm how the key is used.
功能分析
Type: OpenClaw Skill
Name: stock-fundamental-analysis
Version: 1.0.0
The skill bundle contains a significant shell injection vulnerability in SKILL.md, as it instructs the AI agent to execute bash commands using unsanitized user input (<代码>). Additionally, the bundle is incomplete, referencing several missing utility scripts (e.g., health_checker.py, growth_analyzer.py), and financial_fetcher.py relies on a hardcoded relative path to an external repository (../../toc-trading/src) which is outside the bundle's control.
能力评估
Purpose & Capability
The skill claims to perform multi‑dimensional fundamental analysis and includes a valuation engine (valuation_engine.py) and a data fetcher (financial_fetcher.py), which is coherent with the stated purpose. However, SKILL.md expects many other helper scripts (health_checker.py, growth_analyzer.py, industry_comparator.py, report_parser.py, shareholder_tracker.py) that are not present in the bundle. The fetcher also inserts a path to a local 'toc-trading/src' module (stock_data_adapter) which is not declared in requirements or documented — relying on a local/sidecar package is unexpected and unexplained.
Instruction Scope
The SKILL.md runtime commands call a set of tools that do not exist in the package (e.g., tools/health_checker.py, tools/growth_analyzer.py). That means following the provided instructions will fail or cause the integrator/agent to search for or attempt to import missing modules. The instructions also reference {baseDir} and expect scripts under tools/ but the manifest only includes two files. No instructions ask for unrelated system files, but the mismatch gives the agent broad discretion to locate/require other code (toc-trading), which is a scope creep and operational risk.
Install Mechanism
There is no install spec (instruction-only), which lowers installation risk. However, financial_fetcher.py dynamically adds a relative path to 'toc-trading/src' into sys.path at runtime; this implicitly depends on an external/local repository to be present. Because that dependency is not declared or bundled, it is unexpected and could cause the agent to import code from an unknown location on disk or fail at runtime.
Credentials
The skill requests a single API credential (STOCK_DATA_API_KEY) as its primary credential, which is proportionate for fetching market/financial data. The included files do not read other environment variables. Note: the supplied code does not explicitly show how STOCK_DATA_API_KEY is consumed — likely the stock_data_adapter (external) would use it, so the key's usage should be confirmed before granting.
Persistence & Privilege
The skill does not request always: true and does not declare any system config paths. It is user-invocable and allows normal autonomous invocation. There is no evidence the skill modifies other skills or system-wide settings.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install stock-fundamental-analysis - 安装完成后，直接呼叫该 Skill 的名称或使用
/stock-fundamental-analysis触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
- Initial release of stock fundamental analysis skill.
- Provides structured deep analysis reports, including financial health evaluation, valuation metrics, growth assessment, industry benchmarking, financial report interpretation, and shareholder/agency tracking.
- Features comprehensive scoring across key dimensions with weighted aggregation.
- Uses Markdown for structured outputs, includes data tables, clear data sources, and mandatory investment disclaimers.
元数据
常见问题
Stock Fundamental Analysis 是什么？
对上市公司进行深度基本面分析，包括财务健康度评估、估值分析、成长性分析、行业对标、财报解读，输出结构化投研报告. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 85 次。
如何安装 Stock Fundamental Analysis？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install stock-fundamental-analysis」即可一键安装，无需额外配置。
Stock Fundamental Analysis 是免费的吗？
是的，Stock Fundamental Analysis 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Stock Fundamental Analysis 支持哪些平台？
Stock Fundamental Analysis 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Stock Fundamental Analysis？
由 wuritu（@wuritu）开发并维护，当前版本 v1.0.0。
推荐 Skills