市场盘前概览简报

交易日开盘前（8:00-9:25）生成A股市场全景简报，整合市场结构、资金热度、风格轮动、板块强弱等信息，帮助把握当日投资主线。触发词：盘前简报、盘前分析、今日市场、开盘前瞻、市场主线、今日热点。适用场景：交易日开盘前快速了解市场全貌、投资决策参考、识别当日主线方向。不适用场景：非交易日、盘中实时分析、个股深度研究。

What to consider before installing/using this skill: - The skill's runtime requires a daxiapi API token and instructs using npx daxiapi-cli@latest; the registry metadata does not declare this credential—expect to provide and persist a token. - npx will download and run code from the npm registry each time; verify the daxiapi-cli package origin and prefer pinned versions or review its source before executing (check npm page and upstream GitHub repository). Avoid running unknown 'latest' packages on sensitive machines. - The token may be saved to ~/.daxiapi/config.json or added to your shell rc (persistent). If you proceed, create a dedicated, least-privileged token/account, do not reuse high-privilege credentials, and avoid storing secrets in shared accounts or repos. - Consider running the CLI in an isolated environment (container, VM) or limiting network access, and inspect the CLI's configuration file after first use to confirm only expected data is stored. - If you need metadata to match runtime requirements (recommended), ask the publisher to update the registry to declare the required credential (DAXIAPI_TOKEN) and to document/pin the CLI package source/version. Confidence note: I am confident this skill is internally inconsistent (undeclared but required token; use of npx), so exercise caution. Additional information that would change the assessment: a declared required-env field listing the token, a pinned CLI package URL/version, or hosting/publisher provenance (official daxiapi.com package repository) would reduce concern.

Type: OpenClaw Skill Name: xiapi-premarket-briefing Version: 1.0.3 The skill is a financial analysis tool designed to generate A-share market briefings by fetching data from daxiapi.com using its associated CLI tool (daxiapi-cli). All instructions in SKILL.md and the supporting documentation are consistent with this purpose, and no evidence of data exfiltration, malicious execution, or harmful prompt injection was found. The use of npx and API tokens is standard for the integration of this financial data service.