← Back to Skills Marketplace
xhcj-finance
by
jindongyi011039
· GitHub ↗
· v1.0.8
· MIT-0
374
Downloads
1
Stars
1
Active Installs
9
Versions
Install in OpenClaw
/install xhcj-finance
Description
一个用于查询新华财经行情及资讯的工具
Usage Guidance
This package appears to be a straightforward CLI for querying a Xinhua Finance API. Before installing: (1) verify you trust the remote API host (https://xhcj-h5-zg.cnfin.com/); the CLI sends your API credential (after taking an MD5 hash) to that host. (2) Note there is no platform install automation — you must run npm install and npm link locally, which will install third-party npm packages (axios, commander). (3) Prefer using a dedicated API key for this tool (do not reuse high-privilege secrets). (4) If you are concerned about the server expecting the unhashed key, review or test the behavior locally first because the tool hashes the supplied key with MD5 before sending it. Overall the components are coherent, but only install/use it if you trust the remote service and are comfortable running npm install/npm link on your machine.
Capability Analysis
Type: OpenClaw Skill
Name: xhcj-finance
Version: 1.0.8
The xhcj-finance skill is a legitimate CLI tool for querying Xinhua Finance market data and news. The code in index.js follows its stated purpose, implementing basic security measures such as masking API keys in logs and hashing the key before using it as a Bearer token for requests to the official cnfin.com domain. No evidence of data exfiltration, malicious execution, or prompt injection was found.
Capability Assessment
Purpose & Capability
Name/description match the implementation: a CLI that posts queries (market, kline, symbol, news) to a xhcj-related HTTPS API. The required inputs (an API key passed on the command line) are proportional to the stated purpose.
Instruction Scope
SKILL.md instructs normal CLI usage (npm install, npm link, run with --api-key and subcommands). The runtime instructions and the code only perform HTTP requests to the service endpoint and log results; they do not read arbitrary files, environment variables, or send data to unrelated endpoints.
Install Mechanism
There is no platform install spec (the package includes code and a package.json but the skill relies on the user running npm install/npm link). This is low-risk, but be aware dependencies (axios, commander) will be installed on the host when you run npm install.
Credentials
The skill does not request environment variables or other credentials beyond the API key the CLI asks for. No unrelated secret names or config paths are present.
Persistence & Privilege
always is false and the skill does not try to modify other skills or system-wide agent settings. The only persistent action suggested in docs is npm link (user-initiated), which is standard for CLI tools.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install xhcj-finance - After installation, invoke the skill by name or use
/xhcj-finance - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.8
- Added structured frontmatter to SKILL.md, including name, description, version, and author fields
- No functional changes to the skill; documentation reformatted only
- Upgraded version number to 1.0.8
v1.0.7
- 改为通过命令行参数 --api-key 传递API密钥，不再使用环境变量 XHCJ_API_KEY
- 安装与配置部分删除了API密钥环境变量及相关说明
- 所有命令和示例增加 --api-key 参数，并更新了参数说明
- 强调每次执行命令时需要提供 --api-key
v1.0.6
- 更新了API密钥的配置说明，改为推荐使用 export 命令设置环境变量
- 移除了要求编辑 /etc/environment 文件及重启系统的旧步骤
- 其余功能、用法和注意事项保持不变
v1.0.5
- Updated API key configuration steps: now recommends editing /etc/environment for global environment variable setup.
- Removed previous platform-specific (Windows/Linux/macOS) API key setup instructions.
- All other usage instructions and features remain unchanged.
v1.0.4
xhcj-finance v1.0.4
- No file changes detected for this version.
- No new features, bug fixes, or documentation changes identified.
v1.0.3
xhcj-finance 1.0.3 expands feature documentation and usage guidance.
- 新增股票K线数据和股票代码查询说明，文档更详细
- 明确各命令参数说明及示例
- 安装和API密钥配置步骤更新，支持中英文注释
- 增加常见注意事项，提升用户操作安全
- 原功能保持不变，优化使用体验
v1.0.2
- Updated environment variable name from XHCJ-API-KEY to XHCJ_API_KEY throughout documentation.
- Adjusted setup instructions for environment variable to match the new naming convention.
- No functional or code changes in this version.
v1.0.1
- Added installation instructions for both Linux/macOS and Windows users.
- Clarified the need to set the XHCJ-API-KEY environment variable for authentication.
- Included package source information: repository URL, author, and license in the documentation.
- Updated the skill description with authorization requirements.
v1.0.0
xhcj-finance 1.0.0 - Initial Release
- Provides CLI commands to query Xinhua Finance market data in real-time and historically.
- Enables retrieval of latest financial news, supporting filtering by category and keyword.
- Requires XHCJ-API-KEY environment variable for authentication.
- Includes example usage for querying symbols and news through CLI.
Metadata
Frequently Asked Questions
What is xhcj-finance?
一个用于查询新华财经行情及资讯的工具. It is an AI Agent Skill for Claude Code / OpenClaw, with 374 downloads so far.
How do I install xhcj-finance?
Run "/install xhcj-finance" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is xhcj-finance free?
Yes, xhcj-finance is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does xhcj-finance support?
xhcj-finance is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created xhcj-finance?
It is built and maintained by jindongyi011039 (@jindongyi011039); the current version is v1.0.8.
More Skills