实时财经数据推送工具。使用Yahoo Finance API获取全球股市、外汇、大宗商品、加密货币实时行情，支持定时推送到钉钉/微信。包含股票代码、货币单位、实时价格、24h前/昨收价格、涨跌幅。支持标的：纳指、道指、美元指数、黄金、比特币、沪指、恒生、日经、人民币/美元汇率、原油。

What to check before installing or using this skill: - Understand the missing push implementation: the provided script fetches and prints Yahoo Finance data but does not send messages to DingTalk/WeChat. If you need automatic pushing, ask the author or inspect your OpenClaw agent bindings to see how messages are expected to be delivered (webhook config or separate plugin). - Do not assume secrets are handled: the skill declares no env vars for webhooks/tokens. If the platform will provide them via agent bindings, verify where those secrets are stored and who can read them. Never paste webhook tokens into an untrusted skill folder. - The metadata asks for curl but the script uses Python requests — this is a harmless mismatch but indicates sloppy packaging. The package.json is npm-style and lists 'requests' (a Python package) which is inconsistent; ignore or review it manually. - If you want to use pushes, either: (a) add explicit code to post to your DingTalk/WeChat webhook (and store the webhook in a secure env var or agent binding) and review that code, or (b) confirm the platform will handle pushes and inspect the platform-side binding/plugin code. - As a precaution, run the script locally (not as an always-on privileged agent) to confirm output and network targets (it calls only query1.finance.yahoo.com). Review logs and network activity in a sandbox before enabling scheduled runs that might send data to external services. What would raise confidence: - Clear documentation or code showing how DingTalk/WeChat webhooks are provided (where tokens live and how they’re protected). - Removal of the incorrect curl requirement and a corrected manifest (or explanation why package.json exists). - If push functionality is required, seeing the explicit posting code in the skill (or verified secure platform bindings) so you can audit it.

Type: OpenClaw Skill Name: finance-reporter-publish Version: 1.0.1 The skill is a legitimate financial data reporting tool that fetches market data from the Yahoo Finance API (query1.finance.yahoo.com). The Python script tools/finance_data.py implements standard data retrieval and formatting logic without any suspicious behaviors, such as unauthorized network calls, credential theft, or command injection. All operations align with the stated purpose of providing real-time finance reports.