ClawHub

金十数据

v1.0.6

金十数据财经信息查询 skill。查询黄金/白银/原油等行情报价、最新财经快讯、资讯新闻、财经日历数据时使用。 触发场景：问"黄金价格"、"XAUUSD报价"、"原油快讯"、"财经日历"、"非农什么时候"、"资讯详情"等。 本 skill 包含 Python 代码（jin10/ 模块 + scripts/jin1...

⭐ 0· 51·0 current·0 all-time
byloong@robinspt
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
Requires OAuth token
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description, the bundled Python CLI, and the single declared credential (JIN10_API_TOKEN) align with a client for Jin10 MCP (https://mcp.jin10.com/mcp). The code implements quote/flash/news/calendar features consistent with the skill description.
✓
Instruction Scope
SKILL.md instructs the agent to call the bundled local CLI (scripts/jin10.py) and to provide JIN10_API_TOKEN. The instructions do not ask the agent to read unrelated files or exfiltrate data to endpoints other than the declared Jin10 MCP endpoint.
✓
Install Mechanism
There is no install spec (instruction-only runtime) and no external download or extraction. Python source files are bundled with the skill; running them requires a local python3 but no additional installers.
✓
Credentials
Only one credential (JIN10_API_TOKEN) is declared and used. The code reads environment variables and optionally mentions ~/.openclaw/.env for convenience; no other secrets or unrelated env vars are requested.
✓
Persistence & Privilege
always is false; the skill does not request permanent platform-wide presence or modify other skills. It executes as a user-invoked local CLI and uses the provided API token for remote requests.
Assessment
The package appears internally consistent for a Jin10 client: it will run local Python code and send your JIN10_API_TOKEN as a Bearer token to https://mcp.jin10.com/mcp. Before installing or providing the token, confirm you trust the skill source (the package lists no homepage and the owner is not recognizable). If you proceed: (1) only provide a token with the minimum required privileges, (2) inspect the bundled Python files yourself or review with someone you trust, and (3) revoke the token if you later suspect misuse. Running the skill requires python3 and will communicate with the Jin10 MCP endpoint as intended.

Like a lobster shell, security has layers — review code before you run it.

latestvk974859dch3hspdkq2j3rfyt1h84g5n7

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

Primary envJIN10_API_TOKEN
Environment variables
JIN10_API_TOKENrequired— 金十数据 API Token，必需。获取方式见 https://mcp.jin10.com/app

Comments