悟道 · A股行情数据
v1.0.1悟道 · A股行情数据:股票搜索、K线、分时、排行榜、市场概况、交易日历。Use when: user asks about A股, stock search, K-line charts, minute data, stock rankings, market overview, trading calenda...
⭐ 1· 90·0 current·0 all-time
bywudao@jcdreamjc
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill's name and description describe A‑share market data (search, K‑lines, minute data, rankings, market overview, trading calendar). The only required environment variables (LB_API_KEY and LB_API_BASE) directly correspond to calling a third‑party API and are appropriate for this purpose.
Instruction Scope
SKILL.md instructs the agent to call specific endpoints (examples and parameter lists are provided), to set two env vars, and to parse returned data formats (including comma‑separated minute strings). It does not instruct reading unrelated files, scanning system state, or exfiltrating other secrets. It explicitly warns not to guess the base URL and to only use the documented endpoints.
Install Mechanism
No install spec or code files — instruction‑only. Nothing is written to disk and no external packages are downloaded, which minimizes installation risk.
Credentials
Only two env vars are required (LB_API_KEY and LB_API_BASE). These are proportionate: LB_API_KEY is the API credential and LB_API_BASE is the service endpoint. Note: the agent will send LB_API_KEY as a Bearer token to LB_API_BASE, so the user must trust the endpoint they configure.
Persistence & Privilege
The skill is not always-on and is user-invocable; it does not request persistent agent modifications or access to other skills' configurations. Autonomous invocation is enabled (platform default), so the agent could call the API when the skill is invoked autonomously — this is expected for a data‑fetching skill.
Assessment
This skill appears internally consistent and simply wraps a third‑party A‑share market API. Before installing: (1) Confirm you trust the service at https://stock.quicktiny.cn because your LB_API_KEY will be sent there as a Bearer token; (2) Prefer creating a read‑only / limited key if the provider supports it; (3) Don’t store full trading account credentials in LB_API_KEY; (4) Set LB_API_BASE exactly as instructed (don’t let the agent guess); (5) Be aware the agent may call the external API when you invoke the skill (or if you allow autonomous use), so monitor usage and rotate the key if you suspect misuse.Like a lobster shell, security has layers — review code before you run it.
latestvk971v1wr6m8v205g69kk9dmg3n83h0z9
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📈 Clawdis
EnvLB_API_KEY, LB_API_BASE
