Stock Price Query

v1.1.6

实时股票价格查询,支持 A 股、港股、美股及大盘指数的批量查询,无需 API Key。Real-time stock price query for A-shares, Hong Kong and US stock markets, with batch support and market index. No...

18· 4.6k·47 current·50 all-time
byJeff@tjefferson
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description (stock price queries) match the included scripts and docs. The code only implements market detection, formatting, and HTTP calls to the declared Tencent Finance endpoint (qt.gtimg.cn). Required binary (python3) is appropriate and no unrelated credentials or system paths are requested.
Instruction Scope
SKILL.md instructs the agent to parse user input, map names to codes, then run scripts/stock_query.py. The script performs input validation and then makes GET requests to the documented API. The instructions do not ask the agent to read unrelated files, access secrets, or send data to unexpected endpoints.
Install Mechanism
There is no install spec (instruction-only skill + included Python scripts). Nothing is downloaded or written during install. All code is present in the bundle and uses only the Python standard library.
Credentials
The skill requires no environment variables, no credentials, and no config paths. That is proportional for a read‑only public-API query tool. No secrets are referenced in code or docs.
Persistence & Privilege
always is false and the skill does not request elevated or persistent platform privileges. It does not modify other skills or system-wide settings.
Assessment
This skill appears coherent and limited in scope: it only needs python3 and makes HTTP GET requests to the public Tencent Finance API (qt.gtimg.cn) to fetch quotes. Before installing, consider: 1) network policy — the skill will contact qt.gtimg.cn, so if you must restrict outbound traffic, block or review that host; 2) optional helper script (scripts/check_rank.sh) calls a local 'clawhub' tool if executed — you don't need to run it and it is not required for core functionality; 3) keep an eye on updates from the author (bundled scripts perform parsing/HTTP; as with any code, future versions could change behavior). If you want extra assurance, review or run the Python script in a sandboxed environment to observe network calls before enabling the skill in production.

Like a lobster shell, security has layers — review code before you run it.

latestvk970x2fm79nc45pv6zv0rcyz7984hsyv

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

📈 Clawdis
Binspython3

Comments