Mx Search
v1.0.5本skill基于东方财富妙想搜索能力，基于金融场景进行信源智能筛选，用于获取涉及时效性信息或特定事件信息的任务，包括新闻、公告、研报、政策、交易规则、具体事件、各种影响分析、以及需要检索外部数据的非常识信息等。避免AI在搜索金融场景信息时，参考到非权威、及过时的信息。
⭐ 0· 80·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description, SKILL.md, and the Python client code consistently call the same API endpoint (mkapi2.dfcfs.com) and require a single MX_APIKEY environment variable. Required artifacts (network requests, JSON parsing, text extraction, and writing results) match the stated purpose of querying and returning financial news/report data.
Instruction Scope
Instructions and code only send the user's query to the Eastmoney API and save formatted/plaintext/JSON outputs. They do not access other environment variables or arbitrary local files. Note: the skill saves query output to disk (default /root/.openclaw/workspace/mx_data/output/) which may store sensitive queries or results persistently—this is expected behavior for a CLI client but worth being aware of.
Install Mechanism
No install spec is provided (instruction-only + included Python script). No remote downloads or package-install steps are present. The code uses the requests library; ensure the runtime has that dependency, but there is no opaque installer or external URL fetch.
Credentials
The only credential required is MX_APIKEY, which is appropriate for an API-backed search skill. No unrelated secrets or config paths are requested. The SKILL.md and code consistently use MX_APIKEY and do not read other environment variables.
Persistence & Privilege
The skill does not request 'always: true' or elevated privileges and is user-invocable. However, it writes files by default into a fixed /root/.openclaw/... path; depending on your environment this may be an unexpected location (permission failures if non-root, or storing results under root if run as root). Consider configuring an alternate output directory before use.
Assessment
This skill appears coherent and implements the documented functionality: it will send the user's query and your MX_APIKEY to Eastmoney's finskill API and save both a pretty text view and the raw JSON to disk. Before installing or running: 1) Only provide an API key obtained from a trusted source (the skill expects MX_APIKEY). 2) Change the default output directory if you don’t want query results stored under /root/.openclaw/workspace/mx_data/output/—saved files could contain sensitive queries or extracted content. 3) Ensure the runtime has the Python requests library available. 4) Monitor usage of the API key and rotate it if you suspect it was exposed. If you want additional assurance, inspect or run the provided mx_search.py in a controlled environment to confirm behavior.Like a lobster shell, security has layers — review code before you run it.
latestvk97bbbapxqx45ram2asqajgf6983rkyh
License
MIT-0
Free to use, modify, and redistribute. No attribution required.