Tushare 期货数据

提供明确支持的14个Tushare期货接口，涵盖期货合约信息、各类行情数据、仓单持仓及指数等全面期货数据查询服务。

This skill appears to be a straightforward Tushare Pro wrapper for futures data and only needs your TUSHARE_TOKEN. Before installing: 1) Provide a dedicated Tushare token with the minimal permissions you need (avoid sharing broader account credentials). The skill will send that token to Tushare Pro when calling APIs. 2) Note the metadata inconsistency: some registry metadata omitted the required env var while metadata.json and docs require TUSHARE_TOKEN — confirm the platform will protect that env var. 3) The code has a couple of minor bugs (e.g., trade_cal is routed through pro.query but the implementation may not pass the 'api_name' correctly; import failures of tushare are caught but will surface unclear error messages). These are functionality/usability issues, not indicators of data exfiltration. 4) Ensure tushare and pandas are installed in the runtime environment; test calls with a token that has restricted permissions first. 5) If you plan to allow the agent to invoke skills autonomously, be aware the skill can make arbitrary API calls to Tushare using your token — restrict token scope and monitor usage.

Type: OpenClaw Skill Name: tushare-future-data Version: 1.0.0 The skill is a legitimate wrapper for the Tushare Pro futures data API. It implements a strict whitelist of 14 supported API endpoints in `__init__.py`, effectively preventing arbitrary method execution via `getattr`. Authentication is handled securely by requiring a user-provided token through environment variables or parameters, and the code lacks any indicators of data exfiltration, persistence, or malicious prompt injection.