Skills of A-share market data released by ft.tech.
v1.0.4非凸科技金融数据技能集。覆盖 A 股股票列表、行情、IPO、大宗交易、融资融券、单股行情估值、可转债、ETF、基金、指数(含分页指数描述、下载描述 PDF、权重汇总/成份明细、下载权重 xlsx、详情/K 线/分时)、宏观经济,以及港股公司介绍/估值分析/基础视图/K线等接口(market.ft.tech / f...
⭐ 44· 363·0 current·0 all-time
by@shawn92
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the implementation: numerous sub-skills make HTTPS GET requests to market.ft.tech (and one sub-skill permits ftai.chat). No unrelated credentials, binaries, or external services are requested.
Instruction Scope
SKILL.md and run.py instruct the agent to locate and execute local Python handler scripts (via runpy). Handlers only perform GET requests to market.ft.tech (and ftai.chat for stock-security-info). Test_runner and etf-pcf-download can write files: test_runner writes logs into test_logs/, and etf-pcf-download can save an XML to the working directory but has path traversal protections. This file I/O is consistent with testing and download functionality but is worth noting before running tests or downloads.
Install Mechanism
No install spec; this is an instruction+code bundle that runs included Python scripts. Nothing is downloaded or executed from remote arbitrary URLs during install.
Credentials
The skill declares no required environment variables, no credentials, and no config paths. Handlers do not read env vars in the provided files. Network access is the only external requirement and is directly related to fetching market data.
Persistence & Privilege
always is false and the skill does not request permanent platform-wide privileges. It runs as ordinary code included in the skill package and does not modify other skills or global agent settings.
Assessment
This package contains many local Python handlers that will be executed by run.py; they make HTTPS GET requests to https://market.ft.tech (and one handler to https://ftai.chat). There are no requested secrets or unusual install steps. Before installing: 1) Confirm you trust the market.ft.tech/ftai.chat endpoints and the skill author, because included scripts run with the agent's process privileges; 2) If you will run test_runner, expect it to create test_logs/ files; review or run it in an isolated environment if you are cautious; 3) etf-pcf-download can write files but enforces path restrictions—still avoid running downloads with untrusted filenames; 4) If you have strict network or execution policies, restrict outgoing network access or review the specific handler scripts you plan to use. Overall the skill appears coherent with its stated purpose.Like a lobster shell, security has layers — review code before you run it.
latestvk97aez4avxb3aqrekpg0w856n984dfeg
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
