Tickflow Realtime

使用 TickFlow 数据中心查询实时行情和日K数据。适用于用户想查单个或多个标的的最新价格、涨跌幅、成交量、交易时段，或查询单标的/多标的的日K、最近N根K线、复权K线时。

Security Scan

The code and instructions implement a TickFlow API client as described, but the skill metadata omits the required TICKFLOW_API_KEY and the package source/homepage is unknown — that inconsistency warrants caution before installing.

Purpose & Capability

The skill's name/description match the included Python scripts: they call TickFlow endpoints for quotes and K-lines and return summaries/tables/JSON. However, the registry metadata lists no required environment variables or primary credential while the SKILL.md and code clearly require an API key (TICKFLOW_API_KEY). This omission is an incoherence between declared metadata and actual capability.

Instruction Scope

SKILL.md and the scripts keep to the stated scope: they read an API key from the environment, call TickFlow endpoints (defaults to https://api.tickflow.org), validate and format responses, and avoid writing the API key to disk or logs. The runtime instructions do not ask the agent to read unrelated files or send data to unexpected endpoints.

Install Mechanism

There is no install spec (instruction-only skill with Python scripts included). Nothing in the manifest downloads or writes remote archives; the code is local and uses standard library urllib for network calls. This is the lower-risk install pattern, but note the repository/source is unknown.

Credentials

The code requires a secret API key via the environment variable TICKFLOW_API_KEY (resolve_api_key raises if missing). Yet the registry metadata did not declare any required env or primary credential. Asking for an API key is reasonable for this purpose, but the metadata omission is a red flag — the skill will fail without the key and the registry listing does not surface that it needs credential input.

Persistence & Privilege

The skill does not request always:true, does not modify other skills or system config, and does not persist credentials itself. It behaves as a normal, user-invoked client script.

What to consider before installing

This package appears to be a straightforward TickFlow HTTP client, but the registry entry is missing the fact that it requires TICKFLOW_API_KEY and the source/homepage is unknown. Before installing or supplying an API key: 1) Verify the skill's origin (repo/owner) and prefer published code from a known source; 2) Inspect the included scripts yourself (they're short and readable) to confirm no hidden endpoints; 3) Provide a least-privilege TickFlow API key (or a scoped/test key) rather than a high-privilege/production key; 4) If you must run it, consider running in a restricted/sandboxed environment and monitor network traffic; 5) Ask the publisher to update registry metadata to declare TICKFLOW_API_KEY as a required credential and to add a homepage/source link — the current metadata omission is the main inconsistency.

TickFlow 实时行情与日K

这个 skill 用 TickFlow HTTP API 查询两类数据：

• 实时行情：最新价、涨跌幅、成交量、交易时段
• K 线数据：默认日 K，也可按周期查询最近 N 根 K 线

何时使用

在这些场景触发：

• 用户要查某只股票、ETF、美股、港股的最新行情
• 用户要批量比较多个代码的实时价格或涨跌幅
• 用户要查某个标的池 universes 的实时行情
• 用户要查某个代码的日 K、周 K、月 K
• 用户要查多只标的最近一根或最近几根 K 线

工作流

1. 判断用户是要实时行情还是 K 线。
2. 从环境变量 TICKFLOW_API_KEY 读取 API Key。
3. 实时行情优先使用 GET /v1/quotes；标的较多时可以切到 POST /v1/quotes。
4. K 线单标的使用 GET /v1/klines；多标的使用 GET /v1/klines/batch。
5. 校验响应结构。
6. 返回简洁摘要；如果用户明确要原始数据，再返回 JSON。

API Key

• 统一从环境变量 TICKFLOW_API_KEY 读取
• 不要把 API Key 写入文件、日志或输出内容。

脚本

• 实时行情脚本：scripts/query_quotes.py
• K 线脚本：scripts/query_klines.py
• 共享工具：scripts/tickflow_common.py

参考文档

• API 结构与字段说明：references/api.md
• 对外输出约定：references/output-contract.md

使用约定

• 百分比字段需要按 TickFlow 语义换算：0.01 -> 1%
• timestamp 是毫秒时间戳
• region 枚举目前是 CN | US | HK
• session 枚举见 references/api.md
• K 线接口返回紧凑列式结构；做摘要或表格前先解压

示例

查询单个标的实时行情：

python3 scripts/query_quotes.py --symbols 600519.SH --format summary

批量查询多个代码实时行情：

python3 scripts/query_quotes.py --symbols 600519.SH,000001.SZ,AAPL.US --format table

查询单个标的日 K：

python3 scripts/query_klines.py --symbol 600519.SH --period 1d --count 20 --format table

查询多个标的最近一根日 K：

python3 scripts/query_klines.py --symbols 600519.SH,000001.SZ --period 1d --count 1 --format summary