Taiwan Stock Info
v1.0.0Taiwan stock info using Fugle or FinMind APIs. Provides real-time quotes, historical data, financial statements, and technical indicators for Taiwan stocks.
Security Scan
OpenClaw
Suspicious
high confidencePurpose & Capability
The SKILL.md and examples show calls to Fugle (X-API-Key) and FinMind (Authorization: Bearer) and therefore legitimately require API credentials; however the skill declares no required environment variables or primary credential in its registry metadata. That mismatch is unexpected and disproportionate to the stated purpose — a stock-info integrator should declare the API keys it needs.
Instruction Scope
The instructions are focused: they provide API endpoints and cURL examples to query Fugle and FinMind for quotes, historical data, and indicators. They do not instruct the agent to read local files, system credentials, or send data to unknown third-party endpoints. Minor issue: SKILL.md references examples.md but the included file is named example.md (filename mismatch), which may break usage.
Install Mechanism
This is an instruction-only skill with no install spec and no code files to execute. That minimizes install-time risk; nothing is downloaded or written by an installer.
Credentials
The runtime docs require API keys/tokens (Fugle X-API-Key and FinMind Bearer token) but the skill metadata lists no required env vars or primary credential. That absence is a coherence gap: the skill should declare what credentials it needs and how it expects them supplied. Without that, a user or agent might accidentally expose credentials or the skill might prompt for them in unclear ways.
Persistence & Privilege
The skill does not request persistent presence (always:false) and has no install hooks. It does not request modification of other skills or system settings. Autonomous invocation is allowed (platform default) but not combined with other privilege escalation indicators.
What to consider before installing
This skill's functionality (calling Fugle and FinMind APIs) is coherent, but the registry metadata fails to declare the required API keys/tokens. Before installing: 1) Treat the skill as requiring API credentials — do not paste production credentials into an unknown skill. 2) Ask the author or registry to add required env vars (e.g., FUGLE_API_KEY, FINMIND_TOKEN) and a homepage/source link so you can verify authorship. 3) Test with limited-scope or revoked keys and observe network activity; prefer issuing API keys tied to low-rate or read-only plans. 4) Note the filename mismatch (examples.md vs example.md) — request the author fix it. 5) If you cannot verify the author/source, avoid providing real credentials and prefer manually running the documented cURL commands yourself instead of granting the agent autonomous access.Like a lobster shell, security has layers — review code before you run it.
latest
Taiwan Stock Info
Overview
Complete Taiwan stock analysis tool using Fugle and FinMind APIs. Provides real-time quotes, historical data, financial statements, and technical indicators for Taiwan stocks.
API Endpoints Summary
Fugle API (Real-time & Technical)
- Base URL:
https://api.fugle.tw - Authentication: Header
X-API-Key: {your_api_key} - Features: Real-time quotes, candles, trades, technical indicators
FinMind API (Historical & Financial Data)
- Base URL:
https://api.finmindtrade.com/api/v4/data - Authentication: Header
Authorization: Bearer {your_token} - Features: Historical prices, financial statements, revenue, EPS
Usage Examples
See examples.md for detailed usage examples.
File Structure
tw-stock-analysis/
├── SKILL.md (This file - API overview)
├── api/
│ ├── fugle.md (Fugle API specifications)
│ └── finmind.md (FinMind API specifications)
└── examples.md (Usage examples in cURL format)
Rate Limits
| API | Unverified | Verified |
|---|---|---|
| Fugle | Plan-dependent | Contact provider |
| FinMind | 300/hour | 600/hour |
Comments
Loading comments...
