ClawHub

悟道 · A股市场情报

v1.0.1

悟道 · A股市场情报：龙虎榜、研报数据、竞价数据、智能热榜、每日简报、游资席位。Use when: user asks about A股, 龙虎榜, hot topics, trending news, research reports, analyst ratings, pre-market auction,...

⭐ 0· 82·0 current·0 all-time
bywudao@jcdreamjc
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (A股 market intelligence) match the declared requirements: two env vars (LB_API_KEY, LB_API_BASE) that point to an external market-data API. The endpoints and parameters in SKILL.md are all about market data (hotlist, research reports, auction, briefings, dragon-tiger), so required secrets and endpoints are proportionate to the stated purpose.
✓
Instruction Scope
SKILL.md is instruction-only and confines the agent to calling the listed HTTP endpoints using the provided LB_API_BASE and LB_API_KEY. It does not instruct reading unrelated files, scanning system state, or transmitting data to other unexpected endpoints. It does instruct prompting the user if env vars are missing and to only use listed endpoints.
✓
Install Mechanism
No install spec and no code files — the lowest-risk pattern. Nothing is downloaded or written to disk by an installer.
✓
Credentials
Only two env vars are required: LB_API_KEY and LB_API_BASE, which are appropriate for an API-backed skill. The SKILL.md explicitly shows how to set them and how the API key is used (Authorization: Bearer). No unrelated credentials, config paths, or excessive secrets are requested.
✓
Persistence & Privilege
always is false (not force-included). The skill does not request elevated or persistent system privileges and does not modify other skills or system-wide settings. Autonomous invocation (default) is allowed but is typical for skills and not combined with other red flags here.
Assessment
This skill is an instruction-only connector to an external market-data API (stock.quicktiny.cn). Before installing: 1) Confirm you trust the API provider (they will receive requests containing your LB_API_KEY). 2) Treat the API key as sensitive and only set it in secure agent/runtime environments; revoke it if you suspect misuse. 3) The skill will make outbound HTTP calls to the LB_API_BASE you configure — if you change that URL, ensure it points to a trusted endpoint. 4) Autonomous invocation is allowed (normal for skills); if you want to restrict automatic calls, disable or limit the skill in your agent settings.

Like a lobster shell, security has layers — review code before you run it.

latestvk977p3hfvdb0yh24ntr63gzwa983hg01

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

📰 Clawdis
EnvLB_API_KEY, LB_API_BASE

Comments