Scan Report
0 /100
uwillberich
A股次日决策工作流工具,整合市场结构、隔夜宏观冲击、政策时机和自选股领导力分析
这是一个专业的A股决策分析工具,代码质量高,无恶意行为,所有外部通信均为合法金融数据源,无阴影功能。
Safe to install
可直接使用。所有功能与文档一致,凭证仅用于API认证不外传,网络请求指向合法金融数据源。
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Network | READ | READ | ✓ Aligned | 所有网络调用均为东方财富API和公开RSS源 |
| Filesystem | WRITE | WRITE | ✓ Aligned | 写入 ~/.uwillberich/ 目录用于状态存储 |
| Shell | ADMIN | ADMIN | ✓ Aligned | install_news_iterator_launchd.py:26 使用subprocess执行launchctl,有文档说明 |
| Environment | READ | READ | ✓ Aligned | 仅读取EM_API_KEY/MX_APIKEY用于API认证 |
23 findings
Medium External URL 外部 URL
https://ai.eastmoney.com/mxClaw README.md:111 Medium External URL 外部 URL
https://ai.eastmoney.com/nlink/ README.md:114 Medium External URL 外部 URL
https://news.google.com/rss?hl=en-US&gl=US&ceid=US:en assets/news_iterator_config.json:6 Medium External URL 外部 URL
https://news.google.com/rss/search?q=business+markets+technology&hl=en-US&gl=US&ceid=US:en assets/news_iterator_config.json:11 Medium External URL 外部 URL
https://news.google.com/rss/search?q=AI+model+launch+chip+datacenter+robot&hl=en-US&gl=US&ceid=US:en assets/news_iterator_config.json:16 Medium External URL 外部 URL
https://news.google.com/rss/search?q=OpenAI+OR+NVIDIA+OR+Microsoft+OR+Meta+OR+Google+OR+Apple+OR+Tesla+OR+xAI&hl=en-US&g... assets/news_iterator_config.json:21 Medium External URL 外部 URL
https://news.google.com/rss/search?q=Middle+East+oil+conflict+Iran+Israel+shipping+energy&hl=en-US&gl=US&ceid=US:en assets/news_iterator_config.json:26 Medium External URL 外部 URL
https://feeds.bbci.co.uk/news/world/rss.xml assets/news_iterator_config.json:31 Medium External URL 外部 URL
https://rss.nytimes.com/services/xml/rss/nyt/World.xml assets/news_iterator_config.json:36 Medium External URL 外部 URL
https://feeds.a.dj.com/rss/RSSWorldNews.xml assets/news_iterator_config.json:41 Medium External URL 外部 URL
https://qt.gtimg.cn/q=... references/data-sources.md:30 Medium External URL 外部 URL
https://push2.eastmoney.com/api/qt/ulist.np/get references/data-sources.md:48 Medium External URL 外部 URL
https://push2.eastmoney.com/api/qt/clist/get references/data-sources.md:60 Medium External URL 外部 URL
https://mkapi2.dfcfs.com/finskillshub/api/claw/news-search references/data-sources.md:66 Medium External URL 外部 URL
https://mkapi2.dfcfs.com/finskillshub/api/claw/stock-screen references/data-sources.md:74 Medium External URL 外部 URL
https://mkapi2.dfcfs.com/finskillshub/api/claw/query references/data-sources.md:82 Medium External URL 外部 URL
https://qt.gtimg.cn/q= scripts/market_data.py:49 Medium External URL 外部 URL
https://push2.eastmoney.com/api/qt/ulist.np/get? scripts/market_data.py:99 Medium External URL 外部 URL
https://push2.eastmoney.com/api/qt/clist/get? scripts/market_data.py:131 Medium External URL 外部 URL
https://mkapi2.dfcfs.com/finskillshub/api/claw scripts/mx_api.py:14 Medium External URL 外部 URL
http://www.w3.org/2005/Atom scripts/news_iterator.py:216 Medium External URL 外部 URL
https://ai.eastmoney.com/ scripts/smoke_test.py:76 Info Email 邮箱地址
[email protected] README.md:8 File Tree
30 files · 231.7 KB · 6053 lines Python 15f · 4188L
Markdown 10f · 1153L
JSON 4f · 701L
YAML 1f · 11L
├─
▾
agents
│ └─
openai.yaml
YAML
├─
▾
assets
│ ├─
default_watchlists.json
JSON
│ ├─
industry_chains.json
JSON
│ ├─
mx_presets.json
JSON
│ └─
news_iterator_config.json
JSON
├─
▾
references
│ ├─
cross-cycle-watchlist.md
Markdown
│ ├─
data-sources.md
Markdown
│ ├─
event-regime-watchlists.md
Markdown
│ ├─
message-iterator.md
Markdown
│ ├─
methodology.md
Markdown
│ ├─
opening-window-template.md
Markdown
│ ├─
persona-prompt.md
Markdown
│ └─
trading-mode-prompt.md
Markdown
├─
▾
scripts
│ ├─
benchmark_sources.py
Python
│ ├─
capital_flow.py
Python
│ ├─
fetch_market_snapshot.py
Python
│ ├─
fetch_quotes.py
Python
│ ├─
industry_chain.py
Python
│ ├─
install_news_iterator_launchd.py
Python
│ ├─
market_data.py
Python
│ ├─
market_sentiment.py
Python
│ ├─
morning_brief.py
Python
│ ├─
mx_api.py
Python
│ ├─
mx_toolkit.py
Python
│ ├─
news_iterator.py
Python
│ ├─
opening_window_checklist.py
Python
│ ├─
runtime_config.py
Python
│ └─
smoke_test.py
Python
├─
README.md
Markdown
└─
SKILL.md
Markdown
Security Positives
✓ 代码结构清晰,无混淆或Base64编码
✓ 所有网络请求指向合法金融数据源(eastmoney.com, news.google.com RSS等)
✓ 凭证仅存储在本地~/.uwillberich/runtime.env,不外传
✓ SKILL.md文档完整详细,功能与代码一致
✓ install_news_iterator_launchd.py的subprocess调用在文档中明确声明
✓ 无敏感路径遍历(如~/.ssh、~/.aws等)
✓ 无凭证收割行为,只读取EM_API_KEY用于API认证