ClawHub

Gold Price Inquiry - 黄金价格查询

v1.0.13

查询上金所、上期所、港金、银行渠道、伦敦金银及品牌金店等多源黄金参考价；涨跌字段可辅助说明走势（非投资建议）。当用户说：今天黄金多少钱一克？银行金条什么价？周大福金价？伦敦金走势怎样？或类似金价问题时，使用本技能。

⭐ 11· 1.1k·4 current·4 all-time
by极速数据@jisuapi
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description ask for multi-source gold prices and the skill requires a JISU_API_KEY and python3 — this matches the documented use of the JisuAPI gold endpoints. No unrelated credentials, binaries, or paths are requested.
✓
Instruction Scope
SKILL.md instructs running the included Python script with the JISU_API_KEY and specific commands (shgold, shfutures, etc.). The script only reads command-line args and the JISU_API_KEY env var, calls JisuAPI endpoints, and prints JSON; it does not access other files, system credentials, or external endpoints beyond api.jisuapi.com.
ℹ
Install Mechanism
There is no install spec (instruction-only) which minimizes install risk. Note: the bundled script imports the third-party Python package 'requests' but the skill metadata does not declare or install that dependency — this is an operational mismatch (not a direct security risk) that could cause runtime failures if 'requests' is missing.
✓
Credentials
Only one environment variable is required (JISU_API_KEY) and it is the primary credential needed to call JisuAPI. No other secrets or unrelated env vars are requested or referenced by the code.
✓
Persistence & Privilege
Skill is not always-enabled and does not request system-wide persistence or modify other skills. Autonomous invocation is allowed by default (platform standard) but the skill does not escalate privilege or claim persistent presence.
Assessment
This skill appears to do exactly what it claims: call JisuAPI gold endpoints and return results. Before installing: (1) Understand that using it will send queries (and your JISU API key) to api.jisuapi.com — check JisuAPI's privacy/usage limits and costs. (2) Ensure the agent environment has python3 and the Python 'requests' package installed (the skill doesn't auto-install it). (3) If you care about limiting outbound network access, note that the script makes HTTPS requests to api.jisuapi.com. (4) Review/rotate your JISU API key if you stop using the skill. Overall there are no signs of unrelated data access or exfiltration.

Like a lobster shell, security has layers — review code before you run it.

latestvk976xj72adqt9bzf503bg9gddh8446vw

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🥇 Clawdis
Binspython3
EnvJISU_API_KEY
Primary envJISU_API_KEY

Comments