← 返回 Skills 市场
Stock Valuation using Aswath Damodaran methodologies
作者
Pradeep Singh
· GitHub ↗
· v1.0.5
· MIT-0
338
总下载
1
收藏
0
当前安装
6
版本数
在 OpenClaw 中安装
/install stockvaluation-io
功能描述
Set up, run, compare, and debug StockValuation.io, a local-first DCF valuation platform, including Docker startup, ticker valuations, LLM provider changes, p...
安全使用建议
This skill appears to be what it claims (a local Docker-based valuation app) and its runtime instructions are reasonable and cautious, but the registry metadata overstates required environment variables. Before installing or running: 1) prefer the manual git + docker-compose path and inspect install.sh locally before executing it; 2) do NOT paste API keys into chat—set them in a .env file on your machine and keep .env out of version control; 3) only provide provider keys for the backends you actually intend to use (you do not need to hand over every LLM provider key); 4) keep DUMP_PROMPTS=false unless you explicitly want prompt dumps (they can include sensitive research and prompt text) and ensure PROMPT_DUMP_DIR is a safe local path; 5) confirm which env vars are truly required by the repo (the SKILL.md marks many provider keys as optional) and consider asking the skill maintainer/registry to correct the metadata if it incorrectly marks optional keys as required. If you have limited trust in the repository, run it in an isolated environment (separate Docker host or VM) and avoid supplying multiple high-scope API keys until you verify behaviour.
功能分析
Type: OpenClaw Skill
Name: stockvaluation-io
Version: 1.0.5
The skill provides instructions for managing the StockValuation.io platform, focusing on Docker-based setup, LLM provider configuration, and troubleshooting. It demonstrates strong security awareness by explicitly instructing the agent to avoid 'curl | bash' patterns, protect sensitive environment variables (e.g., API keys and database passwords), and treat prompt dumping as a privacy-sensitive operation (SKILL.md, setup-and-run.md).
能力评估
Purpose & Capability
Name/description match the actions described in the SKILL.md: a local Dockerized valuation platform that can use multiple LLM providers, read .env, and run Docker Compose. Required binaries (git, docker/docker-compose) are appropriate. However, the registry marks many provider API keys and prompt-dump vars as required even though the docs state provider keys and prompt dumping are optional for fuller workflows.
Instruction Scope
SKILL.md instructs the agent to inspect repo files (README.md, .env.example, docker-compose.local.yml) and follow local Docker Compose flows. It explicitly warns not to ask users to paste secrets into chat, recommends inspecting install.sh before running and treats prompt dumping and volume deletion as privacy/destructive actions. There are no instructions to read unrelated system files or exfiltrate data.
Install Mechanism
This is an instruction-only skill (no install spec). That minimizes disk-write and remote-code risks; the guidance recommends manual cloning and inspecting installer scripts rather than curl|bash.
Credentials
The skill's required env list in the registry includes many LLM provider API keys (ANTHROPIC_API_KEY, OPENAI_API_KEY, GROQ_API_KEY, GEMINI_API_KEY, OPENROUTER_API_KEY), DUMP_PROMPTS, PROMPT_DUMP_DIR, and multiple service secrets. The SKILL.md and referenced docs, however, treat provider keys and prompt dumping as optional. Flag: metadata overstates 'required' credentials. While many keys are plausibly used by the application, marking them all required increases the chance a user will supply high-privilege secrets unnecessarily and widens attack surface. DUMP_PROMPTS/PROMPT_DUMP_DIR are privacy-sensitive and should not be mandatory.
Persistence & Privilege
The skill is not always-enabled and does not request elevated platform privileges. It does not ask to modify other skills or system-wide settings. Default autonomous invocation is allowed (platform default) but is not combined here with other high-risk properties.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install stockvaluation-io - 安装完成后，直接呼叫该 Skill 的名称或使用
/stockvaluation-io触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.5
- Added explicit list of required environment variables, including API keys and prompt dump settings, to the metadata section.
- Marked CURRENCY_API_KEY as the primary environment variable.
- Clarified that prompt dumping (DUMP_PROMPTS) is privacy-sensitive, with output directory set by PROMPT_DUMP_DIR.
- No functional changes to skill behavior.
v1.0.4
No user-facing changes detected for version 1.0.4.
- No changes to files or documentation.
- Behavior and guidance remain the same as the previous release.
v1.0.3
No user-facing changes detected for version 1.0.3.
- No file changes or documentation updates in this release.
- All workflows and instructions remain unchanged.
v1.0.2
No user-visible changes in this release (no file changes detected).
v1.0.1
This skill is for local-only setup and operation of StockValuation.io. The default path is now manual clone + local inspection + Docker Compose, not remote `curl | bash`. The skill explicitly forbids asking users to paste secrets in chat, printing `.env` contents, or suggesting destructive reset commands unless the user explicitly requests a local reset. Docker access is required only to manage the local StockValuation.io stack described by the project itself.
v1.0.0
Initial release of stockvaluation-io skill.
- Provides guidance for setup, running, and debugging StockValuation.io, a local-first DCF valuation platform.
- Supports Docker startup, ticker valuations, LLM provider/model experiments, prompt dumping, and troubleshooting.
- Offers workflow steps, official install guidance, and key repo/service URLs.
- Emphasizes using environment variables for API keys and precise, reproducible commands for operations.
元数据
常见问题
Stock Valuation using Aswath Damodaran methodologies 是什么？
Set up, run, compare, and debug StockValuation.io, a local-first DCF valuation platform, including Docker startup, ticker valuations, LLM provider changes, p... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 338 次。
如何安装 Stock Valuation using Aswath Damodaran methodologies？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install stockvaluation-io」即可一键安装，无需额外配置。
Stock Valuation using Aswath Damodaran methodologies 是免费的吗？
是的，Stock Valuation using Aswath Damodaran methodologies 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Stock Valuation using Aswath Damodaran methodologies 支持哪些平台？
Stock Valuation using Aswath Damodaran methodologies 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Stock Valuation using Aswath Damodaran methodologies？
由 Pradeep Singh（@softcane）开发并维护，当前版本 v1.0.5。
推荐 Skills