Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

香港银行存款利率查询

v1.1.0

查询香港银行存款利率。当用户要求查询银行利率、存款利率、定期存款利率、openclaw、设置利率提醒 时触发。

0· 160·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for laosji/hk-bank-rates.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "香港银行存款利率查询" (laosji/hk-bank-rates) from ClawHub.
Skill page: https://clawhub.ai/laosji/hk-bank-rates
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install hk-bank-rates

ClawHub CLI

Package manager switcher

npx clawhub@latest install hk-bank-rates
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The skill's purpose (query bank rates and set reminders) matches the described WebFetch and scheduling behavior. However, it explicitly depends on a Notion database (Notion Database ID and Data Source ID) but the skill declares no required credentials or environment variables for accessing Notion. Reaching a private Notion database normally requires an API token; the absence of any declared credential is an inconsistency.
!
Instruction Scope
SKILL.md instructs the agent to read and write a cache file at ~/.claude/hk-bank-rates-cache.json, to fetch data from Notion via 'notion-fetch', to perform arbitrary WebFetch scrapes of bank websites, and to create/manage scheduled tasks. Those actions go beyond a simple query helper: they persist potentially sensitive scraped content to disk and run recurring autonomous tasks. The skill's metadata did not declare the use of this filesystem path or that it will create scheduled background tasks.
Install Mechanism
There is no install spec and no code files — instruction-only. That minimizes supply-chain risk because nothing is downloaded or installed by the skill itself.
!
Credentials
The instructions require access to a Notion database but list no env vars (no NOTION_TOKEN or similar). The skill also uses the user's home directory (~/.claude) for cache storage without declaring config paths. While the skill does not request API keys or other secrets explicitly, the lack of declared credentials for Notion is a proportionality/clarity problem: either the platform supplies Notion access implicitly (not documented) or the skill is missing an essential declared requirement.
Persistence & Privilege
The skill will create a scheduled task (taskId: hk-bank-rate-monitor) which gives it recurring autonomous execution and it will read/write ~/.claude/hk-bank-rates-cache.json on each run. 'always' is false, so it's not force-installed, but scheduled tasks plus local cache persistence increase the blast radius if the task or cache handling is abused. This is expected for a monitoring skill but should be made explicit and auditable.
What to consider before installing
Before installing, ask the developer or manifest to clarify: (1) How will the skill access the Notion database? It references a Notion DB ID but declares no credentials — you should expect to provide a NOTION_TOKEN or to confirm the platform supplies secure Notion access. (2) The skill writes and later reads ~/.claude/hk-bank-rates-cache.json — review what data will be stored (it may include raw scraped page text) and whether you’re comfortable with that being written to your home directory. (3) The skill creates a scheduled task named hk-bank-rate-monitor that will run periodically and perform network fetches and file writes — confirm you want that persistent background behavior. (4) Because the skill comes from an unknown source with no homepage, prefer running it in a restricted/sandboxed agent or request the full source (or a manifest that lists required env vars and exact fetch behavior) before granting permission. If any of these points are unclear or you cannot verify the Notion access method, treat the skill as risky and do not enable scheduled/background execution or filesystem writes until resolved.

Like a lobster shell, security has layers — review code before you run it.

latestvk974e501fkbnh656x43pv8kfe98394dh
160downloads
0stars
2versions
Updated 11h ago
v1.1.0
MIT-0

香港银行存款利率查询

查询香港各大银行的最新定期存款利率,支持定时检查利率变动。

数据源

Notion 数据库 ID: f455cbdba9374fd29a749791088b69a5 Data Source ID: 18bc259d-d6ce-4ba8-a4da-5f14c1b51137

数据库字段:

  • 银行名称:银行官方名称
  • 利率查询URL:银行官网利率页面
  • 别名:银行的其他常用名称(逗号分隔),用于模糊匹配
  • 备注:抓取相关注意事项

功能一:查询利率

1. 解析用户输入

用户可能输入:

  • 具体银行名称(如"汇丰"、"HSBC"、"中银")
  • "所有银行" / "全部" → 查询所有银行
  • 特定币种(如"美元定存")→ 查询后按币种筛选展示

2. 从 Notion 匹配银行

使用 notion-fetch 获取数据库,遍历所有记录,用银行名称别名字段进行模糊匹配。

匹配规则:

  • 用户输入包含银行名称或任一别名 → 匹配成功
  • 输入 "所有" / "全部" / "all" → 返回所有银行
  • 匹配不到 → 列出所有可查银行供用户选择

3. 抓取利率数据

对匹配到的每家银行,使用 WebFetch 访问其利率查询 URL:

WebFetch(url=银行利率URL, prompt="提取页面中所有的定期存款利率信息,包括币种、期限、利率、客户类型、最低存款额。以结构化表格形式返回,中文输出。")

4. 格式化输出

将结果以清晰的表格格式返回给用户:

## 🏦 汇丰银行 定期存款利率

### 港元 (HKD)
| 期限 | 利率 |
|------|------|
| 3个月 | 2.20% |
| 6个月 | 2.00% |

### 美元 (USD)
| 期限 | 利率 |
|------|------|
| 3个月 | 3.20% |
| 6个月 | 3.10% |

> 数据来源:汇丰银行官网 | 查询时间:2026-03-20
> 以上利率仅供参考,实际以银行公布为准

5. 抓取失败处理

如果 WebFetch 失败(超时、JS 动态加载、PDF 等):

  • 告知用户该银行暂时无法自动获取利率
  • 提供银行官网链接,建议用户直接访问
  • 如果备注字段有说明,展示给用户

功能二:定时利率检查(用户触发设置)

当用户输入以下关键词时触发设置流程:

  • "设置提醒" / "设置定时检查" / "利率提醒" / "monitor" / "alert"
  • "每天检查利率" / "利率变动通知"

设置流程

第一步:确认参数

向用户询问以下配置(提供默认值):

  1. 监控银行:默认全部,用户可选择特定银行
  2. 关注币种:默认 HKD + USD + RMB,用户可自定义
  3. 检查频率:默认每天早上 9:00,用户可改时间
  4. 通知方式:告知用户结果会在 Claude Code 中显示为通知

示例交互:

请确认利率监控设置:
- 监控银行:全部(10家)
- 关注币种:HKD, USD, RMB
- 检查时间:每天 09:00
- 通知方式:Claude Code 通知

确认后我将创建定时任务。输入"确认"或修改参数。

第二步:创建缓存文件

首次设置时,抓取所有选中银行的当前利率,保存到本地缓存:

文件路径:~/.claude/hk-bank-rates-cache.json

{
  "last_check": "2026-03-20T09:00:00+08:00",
  "banks": {
    "汇丰银行": {
      "url": "https://...",
      "rates_summary": "HKD 3M:2.20% 6M:2.00% | USD 3M:3.20% 6M:3.10% | RMB 3M:1.30% 6M:1.30%",
      "raw_text": "完整的抓取文本..."
    },
    "渣打银行": { ... }
  },
  "config": {
    "watched_banks": ["all"],
    "watched_currencies": ["HKD", "USD", "RMB"],
    "cron": "0 9 * * *"
  }
}

第三步:创建定时任务

使用 mcp__scheduled-tasks__create_scheduled_task 创建定时任务:

  • taskId: hk-bank-rate-monitor
  • cronExpression: 用户选择的时间(默认 0 9 * * *
  • prompt: 见下方完整 prompt

定时任务 Prompt

你是香港银行利率监控助手。请执行以下步骤:

1. 读取缓存文件 ~/.claude/hk-bank-rates-cache.json,获取上次的利率数据和监控配置。

2. 根据配置中的 watched_banks,从 Notion 数据库(ID: f455cbdba9374fd29a749791088b69a5)获取银行列表和利率查询 URL。

3. 对每家银行使用 WebFetch 抓取最新利率:
   WebFetch(url=利率URL, prompt="提取所有定期存款利率,包括币种、期限、利率。简洁表格形式返回。")

4. 将每家银行的新利率摘要(格式:"HKD 3M:x% 6M:y% | USD 3M:x% 6M:y%")与缓存中的 rates_summary 对比。

5. 如果有变化:
   - 输出变动报告,格式如下:
     📊 香港银行利率变动报告 (日期)

     🔄 [银行名称]
     变动前:HKD 3M: 2.20%
     变动后:HKD 3M: 2.30% ⬆️ (+0.10%)

   - 无变化的银行不输出

6. 如果全部无变化,输出:
   ✅ 今日利率无变动(已检查 X 家银行)

7. 无论是否有变化,都更新缓存文件 ~/.claude/hk-bank-rates-cache.json 中的 last_check、各银行的 rates_summary 和 raw_text。

8. 如果某银行抓取失败,在报告中标注 ⚠️ 并保留上次缓存数据不覆盖。

管理定时任务

用户可以通过以下指令管理:

  • "暂停利率检查" / "停止监控" → 提示用户使用 Claude Code 的定时任务管理功能停止任务
  • "修改检查时间" → 删除旧任务,按新参数重新创建
  • "查看上次检查结果" → 读取 ~/.claude/hk-bank-rates-cache.json 展示

支持的银行

银行抓取状态
汇丰银行✅ 稳定
中国银行(香港)✅ 稳定
渣打银行✅ 稳定
星展银行✅ 稳定
花旗银行✅ 稳定
工银亚洲✅ 稳定
建行亚洲⚠️ JS动态加载
恒生银行⚠️ 页面无利率数据
招商永隆⚠️ 可能超时
华侨银行⚠️ PDF格式

多银行对比

如果用户查询多家银行,在所有银行数据返回后,额外输出一个横向对比表

## 📊 利率对比(港元 3个月定存)

| 银行 | 利率 |
|------|------|
| 汇丰 | 2.20% |
| 渣打 | 2.10% |
| 星展 | 2.05% |
| 中银 | 2.10% |

注意事项

  • 利率数据实时从银行官网抓取,每次查询都是最新数据
  • 不要缓存或硬编码利率数据(定时任务的缓存仅用于变动对比)
  • 部分银行利率区分客户等级(如 Premier、Priority 等),应全部展示
  • 如果用户只关心某个币种,只展示该币种的利率
  • 查询结果末尾始终加上免责声明

Comments

Loading comments...