my_stock_watchlist_skill

当用户提到“观察列表”或“股票观察”时触发。用于管理钉钉多维表格中的股票观察名单。

Security Scan

The skill's declared purpose (manage a DingTalk multi-dimensional table watchlist) matches its instructions and requirements; it is an instruction-only wrapper that delegates operations to the dingtalk-ai-table dependency and does not request unrelated permissions or install software itself.

Purpose & Capability

The skill declares and documents only watchlist operations (add, delete, query) against a specific DingTalk multi-dimensional table. The listed dependency (dingtalk-ai-table) is the expected mechanism to perform those actions, so the capability request is proportional to the stated purpose.

Instruction Scope

Runtime instructions are narrowly scoped: they reference a single external table URL, a Base ID and Sheet ID, and call specific records APIs (GET/POST/DELETE) via dingtalk-ai-table. The instructions do not ask the agent to read arbitrary files, system environment variables, or send data to unrelated endpoints.

Install Mechanism

This is an instruction-only skill with no install spec and no code files; nothing is written to disk or downloaded. That is the lowest-risk install model and is proportionate for a small wrapper skill.

Credentials

The skill itself declares no required environment variables or credentials, which is consistent with being a thin wrapper. However, it depends on the dingtalk-ai-table skill to perform API calls; that dependency will need DingTalk credentials/permissions at runtime. Users should verify that the dependency's credentials are appropriately scoped because this skill will operate on the specific table URL provided (it can add/delete records if the dependency has permission).

Persistence & Privilege

always is false and the skill does not request persistent/privileged installation. It also doesn't modify other skills or agent-wide configuration. Normal autonomous invocation is allowed by platform defaults (no extra concern here).

Assessment

This skill is a narrow wrapper that will call the dingtalk-ai-table dependency to add, remove, or list records in the specific DingTalk table whose URL and IDs are hardcoded in SKILL.md. Before installing, verify: (1) you trust the skill owner and the hardcoded table URL — the skill can modify that table if the dependency's credentials allow it; (2) the dingtalk-ai-table integration/token in your agent has only the minimum permissions required (read/write only to intended tables); (3) you are comfortable with the agent being able to invoke the skill autonomously (default behavior). Also note the small metadata/version mismatch in skill.json vs registry metadata; it’s likely benign but you may want the author to confirm the version.

My Stock Watchlist Skill (股票观察列表管理技能)

核心规则与触发条件

• 触发条件：仅当用户提到“观察列表”或“股票观察”相关话题时触发。
• 必要前置：明确的操作意图（查看、新增、删除）和标的代码（如 NVDA）。

工作流程

所有操作均基于指定的钉钉多维表格进行：

• 表格 URL: https://alidocs.dingtalk.com/i/nodes/1OQX0akWmxpyBpnaCQQQoYkY8GlDd3mE
• Base ID (nodeId): 1OQX0akWmxpyBpnaCQQQoYkY8GlDd3mE
• Sheet ID: hERWDMS

1. 列表新增

• 动作：在表格末尾新增一行，将标的字段填入用户提供的标的简码。
• 执行方式：调用 dingtalk-ai-table 技能中的 API 规范，构造 POST /v1.0/notable/bases/{base_id}/sheets/{sheet_id}/records 请求。请求体中的 fields 必须包含标的名称字段。

2. 列表删除

• 动作：查询表格中对应的标的行，定位其 recordId，然后执行删除操作。
• 执行方式：
  1. 调用 dingtalk-ai-table 获取记录列表 GET /v1.0/notable/bases/{base_id}/sheets/{sheet_id}/records，遍历查找到目标标的所在行的 id。
  2. 调用删除记录 API DELETE /v1.0/notable/bases/{base_id}/sheets/{sheet_id}/records/{record_id} 进行删除。

3. 列表查询

• 动作：获取当前所有观察标的，或查询某个标的是否在观察列表中。
• 执行方式：
  1. 调用 dingtalk-ai-table 获取记录列表 GET /v1.0/notable/bases/{base_id}/sheets/{sheet_id}/records。
  2. 解析返回的 JSON 数据，提取出所有的 标的 字段的值并进行总结。
  3. 如果用户询问某个特定标的（如“NVDA 在列表中吗？”），则匹配提取的数据并给出明确答复。

字段映射说明

• 股票代码字段名：标的 （在调用 dingtalk-ai-table 技能的 records API 时，fields 字典的键必须严格使用此名称，例如 {"fields": {"标的": "NVDA"}}）。