A股港股美股股价查询
v1.0.0Query current A/HK/US-share stock prices using natural language stock names. Invoke when user asks about stock prices, market data, or mentions Chinese stock...
⭐ 0· 153·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description claim (query A/HK/US stock prices via natural-language names) aligns with the included script: it searches for a stock code and fetches prices. No unrelated credentials, binaries, or privileged actions are requested.
Instruction Scope
Runtime instructions simply run the included Python script, which performs only network calls to public endpoints and prints results. Note: SKILL.md states '数据源: 新浪财经' but the script uses both an Eastmoney search API (to resolve names->codes) and Sina (to fetch prices). Also SKILL.md examples use 'uv run python ...' and paths that are platform-specific — otherwise the instructions stay within the skill's purpose.
Install Mechanism
No install spec; the skill is instruction-only with one bundled Python script. This is low-risk compared to arbitrary downloads or installers.
Credentials
No environment variables, credentials, or config paths are required. The script does network requests but does not access secrets or other system configuration.
Persistence & Privilege
Skill does not request always:true and does not modify other skills or system settings. It runs when invoked (user-invocable/autonomous invocation allowed by platform default).
Assessment
This skill appears to do what it says: it resolves a stock name via Eastmoney and fetches prices from Sina. Before installing, consider: (1) the script makes outbound HTTPS requests to two third‑party domains (searchapi.eastmoney.com and hq.sinajs.cn) — any query you ask will be sent there; (2) it requires the Python 'requests' package at runtime but doesn't declare it; ensure your environment has it or the script will fail; (3) the script interpolates the user-supplied stock name directly into the query URL without URL-encoding (special characters could break requests or alter query parameters) — you may want to sanitize/encode input; (4) documentation slightly understates data sources (mentions only Sina) — review the code if you need to control which APIs are contacted; (5) no secrets or system files are accessed. If you want extra caution, run the script in a sandbox or inspect/modify it to add URL encoding and explicit dependency checks before enabling the skill.Like a lobster shell, security has layers — review code before you run it.
latestvk975ywdmv9ky44w7b73c89x75x83938c
License
MIT-0
Free to use, modify, and redistribute. No attribution required.