Alpha Vantage API
v1.0.0Alpha Vantage 金融数据 API。支持股票、外汇、加密货币的实时和历史数据。 免费 API key: demo (限流),建议申请自己的免费 key。
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the included code: alpha.js implements calls to alphavantage.co for quotes, time series, forex and crypto. No unrelated network endpoints, binaries, or credentials are requested.
Instruction Scope
SKILL.md instructs running node alpha.js and shows expected commands, which align with the code. Minor mismatches: SKILL.md examples sometimes use 'alpha quote AAPL' and show using an ALPHA_KEY environment var, but alpha.js does not read ALPHA_KEY and expects commands invoked as 'node alpha.js ...' or via stored config. This is a documentation inconsistency but not malicious scope creep.
Install Mechanism
No install spec; skill is instruction+script only (alpha.js). Nothing is downloaded or extracted at install time.
Credentials
The skill does not require environment variables or external credentials up front. It does persist an API key to a local config.json (in the skill directory) when you run 'apikey', which is expected for this client but means your key is stored on disk in plaintext.
Persistence & Privilege
always:false (no forced presence). The script writes its own config.json in its directory to store the API key, which is normal for a CLI client and does not modify other skills or system-wide settings.
Assessment
This skill appears to do what it claims: it calls alphavantage.co and stores a provided API key in a local config.json. Before installing, consider: (1) the package author/source is unknown and there is no homepage — review the code if you don't trust the origin; (2) the API key is saved in plaintext to config.json in the skill directory—ensure that directory's permissions are acceptable or avoid storing sensitive/prod keys there; (3) SKILL.md mentions an ALPHA_KEY env var and shorter command names that the script doesn't actually use—follow the script's documented usage (node alpha.js ...) or inspect/adjust the code if you want env-var support; (4) prefer creating a dedicated Alpha Vantage key with limited permissions/usage and monitor usage for unexpected requests.Like a lobster shell, security has layers — review code before you run it.
cryptofinanceforexlateststock
Alpha Vantage Skill
Alpha Vantage 提供股票、外汇、加密货币等金融数据接口。
快速开始
设置 API Key (推荐)
# 使用自己的 API key (免费申请: https://www.alphavantage.co/support/#api-key)
node alpha.js apikey YOUR_API_KEY
# 或使用演示 key (限流)
node alpha.js quote AAPL
查询实时报价
# 股票报价
node alpha.js quote AAPL
# 带 API key
ALPHA_KEY=your_key node alpha.js quote AAPL
获取历史 K 线
# 日K线
node alpha.js daily AAPL
# 周K线
node alpha.js weekly IBM
# 月K线
node alpha.js monthly MSFT
外汇汇率
# 美元兑日元
node alpha.js forex USD/JPY
# 欧元兑美元
node alpha.js forex EUR/USD
加密货币
# 比特币兑美元
node alpha.js crypto BTC/USD
# 以太坊兑比特币
node alpha.js crypto ETH/BTC
命令列表
| 命令 | 说明 | 示例 |
|---|---|---|
| quote | 实时报价 | alpha quote AAPL |
| daily | 日K线 | alpha daily AAPL |
| weekly | 周K线 | alpha weekly AAPL |
| monthly | 月K线 | alpha monthly AAPL |
| forex | 汇率 | alpha forex USD/JPY |
| crypto | 加密货币 | alpha crypto BTC/USD |
| apikey | 设置 API key | alpha apikey YOUR_KEY |
注意事项
- 免费 API 限流 - 每分钟 5 次请求,每天 500 次
- 演示 key - 使用
demokey 可能有严格限流 - 数据延迟 - 免费版数据可能有 15 分钟延迟
- 申请免费 key - https://www.alphavantage.co/support/#api-key
Comments
Loading comments...
