Mx Finance Search
v0.1.0基于东方财富数据库，支持自然语言搜索全网最新公告、研报、财经新闻、交易所动态及官方政策等，覆盖全球市场标的，可用于热点捕捉、舆情监控、研报速览、公告精读及投资决策等场景。Natural language search for financial information, covering authoritativ...
⭐ 0· 36·0 current·0 all-time
by@akiry09
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (financial news/search) align with the code and SKILL.md. The only required secret is EM_API_KEY, which is exactly what a service-backed financial search client would need. The code constructs requests to an EastMoney MCP URL and returns/extracts content as documented.
Instruction Scope
SKILL.md and the Python script limit actions to: read EM_API_KEY, accept a query, call the EastMoney search API, extract text, and optionally save results to a local .txt file. There are no instructions to read unrelated local files, exfiltrate other data, or call unexplained external endpoints.
Install Mechanism
There is no install spec (instruction-only with one bundled Python script). That is low-risk: nothing is downloaded or injected at install time. The runtime requires a Python environment but installs nothing automatically.
Credentials
Only EM_API_KEY is required and is used for the documented API call. No other credentials, keys, or config paths are requested. The secret's use is justified by the skill's purpose.
Persistence & Privilege
always is false (no forced inclusion). The code writes output only to its own default output directory (miaoxiang/mx_finance_search) when saving is enabled; it does not modify other skills or system-wide agent settings.
Assessment
This skill appears coherent and limited to EastMoney search calls, but before installing: 1) verify you obtained EM_API_KEY from the official EastMoney/MxClaw service and that the key can be revoked/rotated; 2) avoid embedding the key in code or logs; use environment variables as instructed; 3) be aware results are saved by default under the skill's workspace (miaoxiang/mx_finance_search)—sensitive content may be persisted; 4) run the script in an isolated environment or with network egress controls if you require stricter data handling; 5) if you need higher assurance, review the bundled scripts locally (they are small) and confirm the MCP endpoint (https://ai-saas.eastmoney.com/proxy/b/mcp/tool/searchNews) matches your expectation.Like a lobster shell, security has layers — review code before you run it.
latestvk97040kaqcq6twwjywtb9d6jh1846cd5
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
EnvEM_API_KEY