ClawHub

Skills of A-share futures data released by ft.tech.

v1.0.0

非凸科技期货数据技能集（market.ft.tech）。覆盖指定交易日合约列表、期货合约基础信息（交易单位、保证金、交割等）、期货 K 线（分钟/日及周月季年聚合）。用户询问期货合约列表、某合约基础信息、期货 K 线或历史行情时使用。用户只给中文名/品种时，先用 futures-lists 做名称到 symbol...

⭐ 0· 82·0 current·0 all-time
by@shawn92
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description describe querying futures data from market.ft.tech; the code and SKILL.md only call endpoints under https://market.ft.tech and require no unrelated binaries, env vars, or config paths. The requested capabilities match the stated purpose.
ℹ
Instruction Scope
Runtime instructions are narrow: execute run.py which dispatches to local sub-skill handlers that build GET requests to market.ft.tech and print JSON. Handlers validate the URL's scheme and netloc before opening. They do not read other files, environment variables, or external endpoints. Note: the skill executes provided local Python handler code (runpy.run_path), so the package's code runs with the agent's permissions — review included scripts before installing. Also, safe_urlopen validates only the initial URL; urllib opener may follow redirects from the server to other hosts, which is a subtle risk if the upstream service issues redirects.
✓
Install Mechanism
No install spec (instruction-only with bundled Python scripts). Nothing is downloaded or written during install; all code is included in the skill bundle.
✓
Credentials
The skill declares no environment variables, credentials, or config paths and the code does not access secrets — proportional to its function of public-data HTTP GETs.
✓
Persistence & Privilege
always:false and user-invocable:true (defaults). The skill does not request persistent/system-wide privileges or modify other skills; it simply executes bundled handlers when invoked.
Assessment
This skill appears coherent and limited to fetching futures data from market.ft.tech and requires no credentials. Before installing, review the included Python files (run.py and sub-skill handlers) because the agent will execute that code locally — if you don't trust the skill source, don't install. Note the minor risk: the code validates the initial request host but not downstream HTTP redirects, so a malicious upstream redirect could expose responses from other hosts; if you need stronger safety, run in a restricted environment or add redirect checks/timeout policies. Otherwise, the footprint matches the described purpose.

Like a lobster shell, security has layers — review code before you run it.

latestvk9761a0tq6b0e5tmzgw7n43h7n840ht9

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments