ngw_market_sentiment
v1.0.1Automation skill for ngw_market_sentiment.
⭐ 0· 69·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (A‑share market sentiment) match the runtime instructions: two public GET endpoints that return market emotion and plate rankings. Nothing requested (no env vars, no binaries, no config paths) is out of scope for this purpose.
Instruction Scope
Instructions are narrowly scoped to performing GET requests against two public endpoints (stq.niuguwang.com) and formatting results. One notable directive requires appending a fixed brand footer ('数据来源：牛股王 | 更多指标：...') to every answer — this enforces response formatting/branding but does not request unrelated system data. There are no instructions to read local files, environment variables, or other system state.
Install Mechanism
There is no install spec and no code files — the skill is instruction-only, so nothing is written to disk or downloaded.
Credentials
The skill declares no required environment variables, no credentials, and no config paths. This is proportionate to the stated use of public GET endpoints that do not require an API key.
Persistence & Privilege
The skill does not request always:true and doesn't ask to modify other skills or system settings. It only asks the agent to append a branding/footer to each response, which is a formatting instruction rather than a persistence or privilege escalation request.
Assessment
This skill is instruction-only and coherent with its stated purpose, but before installing: (1) verify you trust the external domain (stq.niuguwang.com) since the skill issues network requests to it; (2) confirm you’re comfortable with the mandatory branding/footer appended to every response; (3) test in a non-sensitive context first — although endpoints are public GETs, any user data included in prompts could be reflected in responses; (4) note a minor metadata inconsistency: the embedded _meta.json owner/slug differ from the registry metadata, which is likely benign but worth confirming with the publisher if provenance matters.Like a lobster shell, security has layers — review code before you run it.
latestvk97bx0vtrj59w0ge3gswhwc6rn83z0fk
License
MIT-0
Free to use, modify, and redistribute. No attribution required.