Mx Financial Assistant
v0.1.0基于东方财富权威金融数据库，打造覆盖"数据-资讯-知识-分析-决策"全链条的智能问答服务。通过自然语言交互， 为用户提供从基础金融知识科普到专业投资研究支持的全方位解决方案，实现"一问即达"的高效金融信息获取体验。 涵盖七大核心能力：全市场金融数据实时查询（A港美股、基金、债券）、全网财经资讯智能检索（公告、研报...
⭐ 0· 33·0 current·0 all-time
by@akiry09
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description claim a financial Q&A service backed by Eastmoney; the script posts questions to an Eastmoney ai-saas endpoint and requires EM_API_KEY. The declared dependency (httpx) and the single required env var align with that purpose. Note: the skill has no homepage/source listed (provenance unknown), which reduces trust but does not make the behavior incoherent.
Instruction Scope
SKILL.md instructs running scripts/generate_answer.py with a query and optional deep-think flag and to set EM_API_KEY. The script only reads the question (args or stdin), the EM_API_KEY env var, calls the configured API, and prints structured JSON. It does not read other system files, other env vars, or transmit data to third-party endpoints beyond the documented Eastmoney API.
Install Mechanism
There is no high-risk installer or external archive; the script depends on the PyPI package httpx (SKILL.md metadata lists a python install step). Registry-level install spec appears absent even though SKILL.md contains an install entry—verify whether the platform will install httpx automatically or if you must install it. Installing a single PyPI dependency is expected, not unusual.
Credentials
Only EM_API_KEY is required. The script sends this key as an 'em_api_key' header to the Eastmoney endpoint, which is proportionate to calling a protected API. Do not supply unrelated/high-privilege credentials; the skill does not request them.
Persistence & Privilege
The skill does not request always:true, does not modify other skill configs, and does not persist additional tokens or state. Autonomous invocation (disable-model-invocation=false) is the platform default and not problematic here.
Assessment
This skill appears to do what it says: it will send user questions and the EM_API_KEY to Eastmoney's ai-saas endpoint and return formatted results. Before installing: (1) Only provide an EM_API_KEY intended for Eastmoney’s API — do not reuse general-purpose or high-privilege secrets. (2) Note the skill's source/homepage is missing; if provenance matters, prefer packages with a known maintainer or verify the API key provider. (3) Ensure httpx (PyPI) is installed or that the platform will install it for you. (4) If you want extra assurance, review the single included script (scripts/generate_answer.py) yourself or run it in a restricted environment to observe network traffic and behavior.Like a lobster shell, security has layers — review code before you run it.
latestvk973h15kpst8y83s87k1aq2f31846etz
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
EnvEM_API_KEY