技能详情（站内镜像，无评论）
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v1.0.0
统计：⭐ 0 · 18 · 0当前安装次数· 0历史安装次数
⭐ 0
安装量（当前） 0
🛡 VirusTotal ：可疑 · OpenClaw ：可疑
Package：chenxyzcyxpp/racing-quant-ai
安全扫描（ClawHub）
- VirusTotal ：可疑
- OpenClaw ：可疑
OpenClaw 评估
The skill appears to do what it says (query a remote MySQL strategy DB and run basic stock-analysis workflows), but it contains hard-coded remote DB credentials, unsanitized query patterns, and comes from an unknown source — these make it risky without further verification.
目的
The name/description (quantitative strategy selection + stock fundamental analysis) matches the included scripts and SKILL.md: the code connects to a remote MySQL strategy database and extracts strategy/position data, then instructs use of external search/analysis skills. Requiring network DB access is consistent with the stated purpose. However, the DB host, username and plaintext password are embedded directly in multiple scripts rather than…
说明范围
SKILL.md explicitly instructs connecting to the remote DB, running the provided Node scripts, and calling external search/analysis skills (miaoda-web-search, stock-analysis). The instructions do not ask the agent to read unrelated local files or shell history, nor to transmit local system files. Still, runtime behavior will query a remote host and call third-party search/CLI tools, so sensitive workspace data could be exposed indirectly via qu…
安装机制
There is no install spec (instruction-only with included scripts). No external download URLs or installers are invoked by the skill itself. The code uses Node.js and the mysql/mysql2 package which is expected for the stated functionality.
证书
The skill requests no declared environment variables, but all scripts embed a remote DB host, username and plaintext password (host 47.121.180.199, user 'display', password 'display999!', db 'db_strategy'). Embedding credentials in code rather than declaring them or using environment variables is a security smell. Additionally, some SQL queries interpolate table names directly (e.g., using template strings) which could be unsafe if table names…
持久
The skill is not always-enabled and does not request elevated or persistent host privileges. It does not modify other skills or global agent settings. Its runtime footprint is limited to making outbound DB/network calls and running Node scripts as described.
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「Racing Quant AI」。简介：赛马量化AI选股系统，集成量化策略选股+个股基本面智能推荐分析。从量化策略数据库筛选符合需求的策略，获取持仓个股，再进行深度基本面分析，最终给出投资参考。触发…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/chenxyzcyxpp/racing-quant-ai/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
暂无本地缓存内容，可在后台执行详情同步。