The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill requires the akshare Python package to fetch financial data from external APIs. This creates a dependency on external sources and the integrity of the returned content.
[PROMPT_INJECTION]: The skill processes data from external financial reports (A-share and US stocks) and formats it into reports for the agent, creating a surface for indirect prompt injection.
Ingestion points: Data is fetched via ak.stock_yysj_em() and ak.stock_yjyg_em() in scripts/earnings_scanner.py.
Boundary markers: None identified; external data is directly interpolated into the report string.
Capability inventory: The skill writes analysis results to a local JSON file.
Sanitization: There is no evidence of sanitization or validation of the text retrieved from financial data sources before processing.
[DATA_EXFILTRATION]: The script scripts/earnings_scanner.py uses a hardcoded absolute file path /Users/xufan65/.openclaw/workspace/memory/earnings-calendar.json. This reveals the local username (xufan65) and the internal directory structure, which is a form of environmental information exposure.

earnings-tracker