jrj-fin-search-skill金融界资讯研报搜索
v1.0.2A股中文财经资讯和研报摘要搜索，支持按关键词、来源、时间范围查询新闻资讯和研究报告。 用于获取权威来源的市场动态、公司新闻、行业研报等信息。避免AI在搜索金融场景信息时，参考到非权威、过时的信息。 <example>User: "搜索贵州茅台最近3天的新闻" Assistant: 使用 news.js searc...
⭐ 1· 92·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description describe a Chinese financial news and research-report search. The script and API endpoints (default https://quant-gw.jrj.com) implement exactly that functionality. Required credential (JRJ_API_KEY) is appropriate for an API-backed search service.
Instruction Scope
SKILL.md instructs only to run scripts/news.js and set JRJ_API_KEY; the runtime instructions do not ask for unrelated files or credentials. Note: the script also reads an optional JRJ_API_URL environment variable (process.env.JRJ_API_URL) to override the API host; this override is not declared in the skill metadata or docs examples, but is harmless and used to change the target API endpoint.
Install Mechanism
No install spec; skill is instruction-plus-script only. The included JavaScript is plain (uses built-in http/https), there are no external downloads, package installs, or extracted archives.
Credentials
Only JRJ_API_KEY is declared and required — appropriate for this purpose. As noted above, the script accepts an optional JRJ_API_URL env var (not declared in metadata); this is not a credential but it does allow changing the request target and should be considered when deploying keys.
Persistence & Privilege
Skill is not always-enabled, is user-invocable, and does not request persistent system privileges or modify other skills or global agent configs.
Assessment
This skill appears to do what it claims: it posts search requests to the JRJ API and returns results. Before installing, verify that the JRJ_API_KEY you supply is a legitimate API key for the domain listed (quant-gw.jrj.com or the JRJ homepage), and avoid giving unrelated secrets. Be aware the script can be pointed at a different host via JRJ_API_URL (optional env var); if you deploy this in an autonomous agent, that agent will be able to make network requests using the provided key—monitor usage, rotate the key if needed, and ensure the key has appropriate scope and quotas. If you need stricter guarantees, request the skill author to declare JRJ_API_URL in metadata and to document any alternate endpoints or telemetry.Like a lobster shell, security has layers — review code before you run it.
latestvk978ha4ybxsenwyrp4hq15hdtx845b3k
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
EnvJRJ_API_KEY
Primary envJRJ_API_KEY