← Back to Skills Marketplace
282
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install quotedance-market
Description
提供全球市场数据和专业投研情报，自动生成结构化日报和周末市场分析报告。
Usage Guidance
This skill appears to do what it says (fetch market quotes and news) but exercise caution: 1) Inspect the full scripts before running — the file will make outbound HTTP requests and may call the local curl binary. 2) Verify and trust the configured serviceUrl (quotedance.api.gapgap.cc) — it will receive requests as a fallback. 3) Note the likely typo in the env var name (QUTEDANCE_API_KEY); if you set an API key, confirm the variable name used by the script. 4) Run the skill first in a restricted/sandboxed environment or with network blocked to observe behavior, and check the memory/ directory for any stored snapshots. 5) If you plan to provide an API key or allow proxying, prefer using minimal, documented endpoints and only supply credentials you trust.
Capability Analysis
Type: OpenClaw Skill
Name: quotedance-market
Version: 1.0.0
The skill provides market research capabilities by aggregating data from Yahoo Finance, RSS feeds, and a third-party API (quotedance.api.gapgap.cc). It is classified as suspicious because it utilizes risky capabilities, specifically the use of `execFileSync` to execute system-level `curl` commands as a network fallback in `market-scan.js`. While these behaviors are aligned with the stated purpose of fetching financial data, the combination of binary execution, local file system persistence in the `memory/` directory, and outbound network requests to an external service represents a significant attack surface.
Capability Assessment
Purpose & Capability
Name/description (market reports) align with the code: the script fetches quotes, news, and generates reports. However the configured serviceUrl (https://quotedance.api.gapgap.cc) is an opaque third‑party domain not documented in the SKILL metadata/homepage; the skill will send symbol lists/requests to that endpoint as a fallback — verify you trust that host.
Instruction Scope
SKILL.md instructs the agent and user to run the included Node script and documents data sources. The script only reads its own config and writes snapshots to its memory/ directory; it does perform broad network requests to many public news and quote endpoints (Yahoo, Bloomberg feeds, Reuters, Stooq, quotedance-service). No instructions ask it to read unrelated system files or secrets.
Install Mechanism
There is no install spec (instruction-only installer), so nothing is fetched at install time. The runtime script can exec a local curl binary as a fallback (execFileSync('curl')), which will run system binaries when active — this is expected for network fallback but increases runtime risk if you run it on a host you care about.
Credentials
The skill declares no required env vars, yet the script reads standard proxy envs (HTTP(S)_PROXY / ALL_PROXY) and an API key env var spelled process.env.QUTEDANCE_API_KEY (note the apparent misspelling 'QUTEDANCE' vs 'QUOTEDANCE'). The script will send requests (including symbol lists) to quotedance.api.gapgap.cc; although an API key is optional, sending data to that unknown host without explicit user consent is a privacy/identification risk.
Persistence & Privilege
always:false and no special privileges. The script writes its own memory snapshots and cache under skills/quotedance-market/memory. It does not request system-wide config changes or modify other skills. Autonomous agent invocation is allowed by platform defaults (normal).
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install quotedance-market - After installation, invoke the skill by name or use
/quotedance-market - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
quotedance-market 1.0.0 - 专业全球市场投研情报官上线：
- 支持整合美股、A股、期货主流市场行情，实时获取多数据源（Yahoo Finance, quotedance-service）。
- 日报/周报自动切换输出，涵盖市场数据、主题、机会与风险提示。
- 资讯聚合自 Bloomberg、Reuters、华尔街见闻等优质源，按优先级获取。
- 配置灵活（行情关注列表、资讯数量、代理网络、自选股等）。
- 专业可读的市场报告结构，支持表格与 Emoji、风险分级、节点标记等增强展示。
- 提供命令行脚本与智能触发词，易于集成与自动化运行。
Metadata
Frequently Asked Questions
What is quotedance-market?
提供全球市场数据和专业投研情报，自动生成结构化日报和周末市场分析报告。 It is an AI Agent Skill for Claude Code / OpenClaw, with 282 downloads so far.
How do I install quotedance-market?
Run "/install quotedance-market" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is quotedance-market free?
Yes, quotedance-market is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does quotedance-market support?
quotedance-market is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created quotedance-market?
It is built and maintained by yoocky (@yoocky); the current version is v1.0.0.
More Skills