finance-reporter

实时财经数据推送工具。使用Yahoo Finance API获取全球股市、外汇、大宗商品、加密货币实时行情，支持定时推送到钉钉/微信。包含股票代码、货币单位、实时价格、24h前/昨收价格、涨跌幅。支持标的：纳指、道指、美元指数、黄金、比特币、沪指、恒生、日经、人民币/美元汇率、原油。

Security Scan

The skill's code legitimately fetches Yahoo Finance data and prints reports, but the README/SKILL.md claim push-to-DingTalk/WeChat and scheduling integration without requesting or implementing credentials or push logic and there are small metadata inconsistencies (curl requirement, package.json) that don't match the implementation.

Purpose & Capability

The description and SKILL.md claim realtime fetching + timed push to DingTalk/WeChat. The included Python script only fetches data from Yahoo Finance and prints a report — there is no code that sends messages to DingTalk or WeChat, and no environment variables or configuration for webhooks/tokens are requested. The manifest also requires 'curl' though the script uses Python requests. package.json lists 'requests' under dependencies (npm-style JSON) which is inconsistent with a Python package. These mismatches suggest the declared push capability is not actually implemented in the supplied code.

Instruction Scope

SKILL.md instructs running the packaged Python script and configuring an openclaw cron job; it does not instruct the agent to read unrelated files or harvest secrets. However, it references external integrations ('钉钉插件已配置', 'openclaw agents bindings') and implies automated push behavior without providing the webhook/token handling steps. That leaves ambiguous how pushes would occur (relying on external agent-level plugins) and could mislead users about what the skill will do out of the box.

Install Mechanism

There is no install spec (instruction-only), so nothing is written or downloaded by the skill itself — low install risk. The SKILL.md asks the user to pip3 install requests manually. The presence of package.json (npm-style) with 'requests' is odd but not dangerous by itself; it's an inconsistency suggesting sloppy packaging.

Credentials

The skill requests no environment variables or credentials, yet advertises push integration with DingTalk/WeChat which would normally require webhook URLs or tokens. Required binaries list includes 'curl' (unused by the Python script) and omits 'openclaw' which SKILL.md uses for cron and logs. This mismatch may lead users to supply credentials elsewhere (agent plugins) without clear guidance or could indicate incomplete implementation.

Persistence & Privilege

The skill does not request always:true and does not declare any system config paths or elevated privileges. It runs as a normal, user-invoked skill and the Python script only prints to stdout — no persistent background service or auto-enabling behavior is present in the supplied files.

What to consider before installing

This package fetches Yahoo Finance data and prints a formatted report — the included Python script matches that. However, the docs claim scheduled push-to-DingTalk/WeChat but there is no push implementation or any webhook/token handling in the code or declared env vars. Before installing or enabling: (1) review tools/finance_data.py yourself (it only queries Yahoo and prints); (2) do not assume the skill will send messages — you must either configure an external OpenClaw DingTalk/WeChat plugin that handles credentials securely or modify the script to add webhook logic (store tokens in secure env vars or agent bindings); (3) ignore or verify the 'curl' requirement — the script uses Python requests and asks you to pip3 install requests; (4) be cautious when configuring cron jobs to run the exact PATH used in SKILL.md; (5) if you need true push capability, request the author to provide explicit, secure instructions for supplying webhook URLs/tokens (and avoid embedding secrets in code or plaintext files).

Finance Reporter - 实时财经数据推送

📈 专业的财经数据获取与推送工具，支持全球主要金融市场实时行情。

✨ 功能特性

• 全球覆盖：美股、A股、港股、日股、外汇、大宗商品、加密货币
• 实时数据：Yahoo Finance API，数据准确及时
• 智能计算：自动计算涨跌幅，股票显示"昨收"，加密货币显示"24h前"
• 定时推送：支持 cron 定时任务，自动推送到钉钉/微信
• 重试机制：网络失败自动重试3次
• 货币单位：自动显示 USD/CNY/HKD/JPY 等货币符号

📊 支持标的

类别	标的	代码	货币	市场类型
🇺🇸 美股指数	纳指	^IXIC	USD	股票
🇺🇸 美股指数	道指	^DJI	USD	股票
💵 外汇	美元指数	DX-Y.NYB	-	外汇
💵 外汇	人民币/美元	CNY=X	-	外汇
🪙 加密货币	比特币	BTC-USD	USD	加密(24h)
🏆 大宗商品	黄金	GC=F	USD	期货
🏆 大宗商品	原油	CL=F	USD	期货
🇨🇳 A股	沪指	000001.SS	CNY	股票
🇭🇰 港股	恒生	^HSI	HKD	股票
🇯🇵 日股	日经	^N225	JPY	股票

🚀 快速开始

1. 手动获取数据

# 运行脚本获取实时数据
python3 ~/.openclaw/workspace/skills/finance-reporter/tools/finance_data.py

2. 钉钉群调用

在钉钉群中 @你的机器人：

@finance 获取实时财经数据

3. 配置定时任务

# 每天 01:20 自动推送
openclaw cron add \
  --name "finance_daily" \
  --schedule "20 1 * * *" \
  --command "python3 ~/.openclaw/workspace/skills/finance-reporter/tools/finance_data.py"

📋 输出格式示例

📊 实时财经数据 [2026-03-20 01:20]
💡 数据来源: Yahoo Finance API

🇺🇸 美股指数
----------------------------------------
📉 纳指
   代码: ^IXIC
   现价: $21,979.21
   昨收: $22,152.42
   涨跌: -173.21 (-0.78%)

📉 道指
   代码: ^DJI
   现价: $45,884.29
   昨收: $46,225.15
   涨跌: -340.86 (-0.74%)

🪙 加密货币
----------------------------------------
📉 比特币
   代码: BTC-USD
   现价: $69,296.45
   24h前: $71,245.58
   涨跌: -1,949.13 (-2.74%)

⚙️ 配置说明

环境要求

• Python 3.8+
• requests 库

安装依赖

pip3 install requests

自定义标的

编辑 tools/finance_data.py 中的 SYMBOLS 字典：

SYMBOLS = {
    "纳指": {"code": "^IXIC", "currency": "USD", "market": "stock"},
    "道指": {"code": "^DJI", "currency": "USD", "market": "stock"},
    # 添加你的标的...
    "特斯拉": {"code": "TSLA", "currency": "USD", "market": "stock"},
}

市场类型说明

• stock：股票/指数，显示"昨收"
• crypto：加密货币，显示"24h前"
• commodity：大宗商品，显示"昨收"
• forex：外汇，显示"昨收"

📡 数据来源

• Primary: Yahoo Finance API（免费，实时）
• 数据更新: 实时
• API限制: 无限制，但请合理使用

🔧 故障排除

数据获取失败

• 检查网络连接
• 脚本会自动重试3次
• 查看错误日志：openclaw logs

钉钉推送失败

• 确认钉钉插件已配置
• 检查群ID是否正确
• 查看绑定：openclaw agents bindings

📝 更新日志

v1.0.0 (2026-03-20)

• ✅ 支持10个主要标的
• ✅ 智能涨跌幅计算
• ✅ 定时任务推送
• ✅ 钉钉集成
• ✅ 重试机制

🤝 贡献

欢迎提交 PR 和 Issue！

📄 许可证

MIT License