Quant Data Platform
v1.0.0Comprehensive quantitative data platform for A-share market. Real-time quotes, historical data, alternative data (sentiment, news, fundamentals), factor data...
⭐ 0· 73·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description (quant data for A‑share) aligns with the included code and the recommended dependencies (tushare, akshare, pandas, numpy). However, SKILL.md demonstrates use of a TUSHARE_TOKEN while the registry metadata lists no required environment variables — this is an inconsistency that should be clarified (the platform does legitimately use a Tushare token).
Instruction Scope
The SKILL.md instructions stick to data acquisition, caching, and usage examples. They instruct installing tushare/akshare and optionally exporting TUSHARE_TOKEN. The instructions do not ask the agent to read unrelated system files or send data to unknown external endpoints. They do recommend creating/using a cache directory in the user's home (~/.quant_data/cache), which means data and cached files will be written to disk.
Install Mechanism
There is no automated install spec in the registry (instruction-only), and SKILL.md simply recommends pip installing well-known Python packages (tushare, akshare, pandas, numpy). This is a low-risk, common install pattern. No downloads from untrusted URLs or obscure installers are present.
Credentials
The code and documentation expect an optional/required TUSHARE_TOKEN (and use os.getenv to read it). The registry metadata did not declare required env vars or a primary credential — this mismatch should be corrected. The skill creates a cache directory in the user's home (~/.quant_data/cache), so it will write files to disk. No other secret or unrelated credential access is requested.
Persistence & Privilege
The skill does not request always:true and does not modify other skills or system-wide settings. It runs with normal agent invocation privileges. Creating its own cache directory is standard for this type of tool and not elevated privilege.
Assessment
This skill appears to do what it claims: provide A‑share real‑time and historical data using tushare/akshare. Before installing, consider: 1) Provide a TUSHARE_TOKEN if you want real data — the SKILL.md shows this but the registry metadata does not list it; verify you have a valid token and store it securely (not committed to code). 2) The skill will create and write cache files under ~/.quant_data/cache — if you prefer isolation, run it in a virtualenv or container and/or change cache_dir. 3) The pip packages recommended are common, but review and pin versions before installing into production. 4) The skill source and homepage are unknown; if you need higher assurance, review the full quant_data.py file yourself or request the maintainer/source provenance. If you accept those caveats, the skill is internally consistent with its stated purpose.Like a lobster shell, security has layers — review code before you run it.
latestvk979j5q75r8y7zphsmqacryk8d83c3re
License
MIT-0
Free to use, modify, and redistribute. No attribution required.