Hong Kong Stock Market HKEX

Get HKEX (Hong Kong Stock Exchange) market data via FinanceAgent on OneKey Gateway.

Security Scan

The skill's behavior (calling a OneKey gateway with an API key and installing an npm package) matches its stated purpose, but there are inconsistencies in the package/registry metadata and a non-trivial install dependency that warrant caution.

Purpose & Capability

The skill's stated purpose (fetch HKEX data via the OneKey FinanceAgent) aligns with the runtime instructions: it requires a OneKey gateway API key and uses an aiagenta2z/financeagent API. That environment variable and the provided API endpoint are coherent with the described functionality.

Instruction Scope

SKILL.md only instructs exporting a single gateway API key, installing/using an npm package, and calling the OneKey agent endpoint (or using the provided curl). It does not instruct reading unrelated files, broad system probes, or exfiltrating data to unexpected endpoints; the external endpoint referenced (https://agent.deepnlp.org/agent_router) is consistent with the OneKey gateway usage.

Install Mechanism

The skill recommends installing an npm package (@aiagenta2z/onekey-gateway) globally. npm packages are a moderate risk because they execute code from a registry; the package name looks consistent with the agent referenced, but the registry metadata previously supplied to the catalog claimed 'No install spec'. That metadata mismatch and the fact the package will run code on the host warrant review of the npm package source before installation.

Credentials

The SKILL.md requires a single env var (DEEPNLP_ONEKEY_ROUTER_ACCESS), which is appropriate for a gateway API. However, the skill registry metadata at the top of the submission listed 'Required env vars: none' and 'No install spec', which contradicts SKILL.md. This discrepancy (manifest claims no credentials but SKILL.md requires a gateway key) reduces confidence and should be resolved before use.

Persistence & Privilege

The skill does not request always:true, does not ask to modify other skills or system-wide settings, and is user-invocable. Autonomous invocation is allowed by default but is not an additional red flag here.

What to consider before installing

This skill appears to do what it claims — call a OneKey FinanceAgent to get HKEX data — but two things deserve caution: (1) SKILL.md requires DEEPNLP_ONEKEY_ROUTER_ACCESS and an npm package (@aiagenta2z/onekey-gateway), but the registry metadata incorrectly claimed no env vars or install steps; confirm which is authoritative before installing. (2) The npm package will run code on your machine; inspect the package source (or prefer calling the gateway via curl) and limit the scope of the OneKey API key (use least privilege / short-lived token if possible). If you don't trust the npm package or cannot verify it, use the curl example against the listed endpoint instead and keep the gate key secret.

OneKey Gateway

Use one access key to connect to various commercial APIs via the DeepNLP OneKey Agent Router.

Quick Start

Set your OneKey Access Key

export DEEPNLP_ONEKEY_ROUTER_ACCESS=your_access_key

Common settings:

• unique_id: aiagenta2z/financeagent
• api_id: get_hk_stock_market_hkex

Tool

get_hk_stock_market_hkex

Get HKEX (Hong Kong Stock Exchange) stock market data.

Parameters:

• symbol_list (array of string, required): Stock symbols to query.
  • For HKEX, this is typically the numeric stock code as a string (to preserve leading zeros if present), e.g. "700", "1024".
  • Example: ["700", "1024"]

Response (JSON):

• success (boolean): Whether the request succeeded.
• data (array): List of stock quote objects (fields depend on the upstream data source).
• message (string, optional): Error message when success=false.

Usage

CLI Usage

## install onekey agent gateway
npm install @aiagenta2z/onekey-gateway

## CLI to Call API and Symbol List
npx onekey agent aiagenta2z/financeagent get_hk_stock_market_hkex '{"symbol_list": ["700", "1024"]}'

HTTP (curl) Usage

export DEEPNLP_ONEKEY_ROUTER_ACCESS=your_access_key

curl -v -X POST "https://agent.deepnlp.org/agent_router" \
  -H "Content-Type: application/json" \
  -H "X-OneKey: $DEEPNLP_ONEKEY_ROUTER_ACCESS" \
  -d '{
    "unique_id": "aiagenta2z/financeagent",
    "api_id": "get_hk_stock_market_hkex",
    "data": {
      "symbol_list": ["700", "1024"]
    }
  }'