← Back to Skills Marketplace
238
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install qutedance-quotes
Description
提供 A股、港股、期货实时行情查询，股票/期货搜索及A股板块热门涨跌榜信息。
Usage Guidance
This skill appears to do what it claims (fetch market quotes) but it recommends storing your API key inside the shipped config.json and points to an external service URL. Before installing: 1) Verify and trust the service host (https://quotedance.api.gapgap.cc) or host your own quotedance-service. 2) Do NOT store secrets in the repo config.json—use an environment variable (QUTEDANCE_API_KEY) or a secure secret store. 3) If you allow autonomous agent invocation, be cautious because the skill will send queries (and any provided API key) to that external endpoint. 4) Optionally review the script locally to confirm no extra endpoints or unexpected behavior, and consider removing or leaving the apiKey blank in config.json before adding the skill.
Capability Analysis
Type: OpenClaw Skill
Name: qutedance-quotes
Version: 1.0.0
The skill facilitates financial market data retrieval from an external API (quotedance.api.gapgap.cc) and handles authentication via API keys. While the code in scripts/qutedance-quotes.js is functionally aligned with its stated purpose, it is classified as suspicious because it utilizes external network access to a non-standard domain and explicitly encourages the insecure practice of storing API keys in a plain-text configuration file (config.json). These behaviors, while plausibly necessary for the skill's operation, represent risky capabilities and security vulnerabilities in an untrusted bundle.
Capability Assessment
Purpose & Capability
Name, description, SKILL.md and the JS implementation all align: the skill queries quotedance-service endpoints for quotes, plate/top info and search. It does not request unrelated credentials or binaries.
Instruction Scope
SKILL.md instructs the agent and users to call the listed quotedance endpoints and to run the included Node script; it does not ask the agent to read unrelated files. However the docs explicitly advise writing the API key directly into the skill's config.json (repo file), which expands the data surface and is insecure.
Install Mechanism
No install specification or download steps; this is an instruction+script skill with no external installers. The script runs normal HTTP calls and filesystem reads; nothing is written to disk by an installer.
Credentials
No required env vars are declared, but the code will read process.env.QUTEDANCE_API_KEY as a fallback and the SKILL.md encourages putting the API key in config.json. Storing secrets in a repository file is disproportionate and risky. The configured serviceUrl (https://quotedance.api.gapgap.cc) is an external endpoint — expected for this skill but you should verify you trust that host.
Persistence & Privilege
Skill does not request always:true, does not modify other skill or system configs, and runs only when invoked. Autonomous invocation is enabled by default (disable-model-invocation=false), which is platform-normal; combine that with the credential concerns if you allow autonomous runs.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install qutedance-quotes - After installation, invoke the skill by name or use
/qutedance-quotes - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Qutedance Quotes v1.0.0
- Initial release with support for real-time quotes of A-shares, Hong Kong stocks, and futures.
- Provides A-share sector top gainers/losers and popular boards leaderboard.
- Enables fuzzy search for stocks, futures, and other symbols by name or code.
- Simple configuration and manual script usage instructions included.
- Outputs formatted Markdown tables/lists for easy in-chat viewing.
Metadata
Frequently Asked Questions
What is qutedance-quotes?
提供 A股、港股、期货实时行情查询，股票/期货搜索及A股板块热门涨跌榜信息。 It is an AI Agent Skill for Claude Code / OpenClaw, with 238 downloads so far.
How do I install qutedance-quotes?
Run "/install qutedance-quotes" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is qutedance-quotes free?
Yes, qutedance-quotes is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does qutedance-quotes support?
qutedance-quotes is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created qutedance-quotes?
It is built and maintained by yoocky (@yoocky); the current version is v1.0.0.
More Skills