Wyckoff Diagnose

Wyckoff 2.0 诊股系统。输入任意A股代码，输出完整分析报告（Phase状态、Volume Profile关键价位，综合评分、评级、操作建议）。支持右侧趋势🅡和左侧积累🅁双视角诊断。当用户要求"诊股"、"分析股票"、"帮我看看XXX"、"这个股怎么样"、"诊断"时触发。支持输入6位股票代码。

Caution: the code includes a hardcoded Tushare token and a custom API host (http://140.143.209.128:5000). That means your stock-code queries would be routed (and visible) to that remote server using the embedded credential. Before installing or running: 1) inspect ts_data.py and consider removing or replacing the hardcoded TOKEN/_http_url; 2) prefer configuring your own TUSHARE token via an environment variable and using the official Tushare endpoint; 3) if you can't validate the remote host, run the skill in a network‑restricted sandbox or block outbound access to that IP; 4) ask the publisher to explain why a private HTTP host is used and to update SKILL.md to document all data sources and required credentials. If you need a safe quick test, edit diagnose.py to force it to use only efinance or baostock (remove/disable ts_data usage) so queries do not go to the unknown endpoint.

Type: OpenClaw Skill Name: wyckoff-diagnose Version: 1.2.0 The skill bundle contains a hardcoded Tushare API token and routes data requests to a non-official, hardcoded IP address (http://140.143.209.128:5000) in scripts/ts_data.py. While the core logic in scripts/wyckoff_engine.py and scripts/diagnose.py appears aligned with the stated purpose of stock analysis, the use of an unverified third-party proxy for financial data retrieval is a significant security risk, although no direct evidence of user data exfiltration was found.