← Back to Skills Marketplace
luokeer52

market-beats

by luokeer52 · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
94
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install market-beats
Description
7x24小时财经新闻实时爬取与展示。支持金十数据等多个财经新闻源的实时爬取,通过WebSocket实现秒级推送,提供美观的前端界面展示最新财经资讯。适用于需要实时监控财经动态的场景。
Usage Guidance
This package is a thin client that forwards your messages to a remote Prana/Claw backend (the scraping and UI are performed server‑side), not a self-contained market scraper. Before installing or running: 1) Understand that the client will attempt to obtain API keys from a default UAT endpoint (https://claw-uat.ebonex.io/) if you don't provide credentials, which may create/return keys and then write them to config/api_key.txt; 2) If you do not trust that remote endpoint, set PRANA_SKILL_NO_AUTO_API_KEY=1 and supply PRANA_SKILL_PUBLIC_KEY + PRANA_SKILL_SECRET_KEY (or PRANA_SKILL_API_KEY) pointing to a trusted service; 3) To avoid writing secrets to disk, set PRANA_SKILL_SKIP_WRITE_API_KEY=1 and manage keys via env vars; 4) Note SKILL.md requires the runner to pass remote responses to end users verbatim — ensure you trust the remote service and its content before exposing results to users; 5) Do not commit config/api_key.txt to any public repo. These mismatches between the package behavior and its description/metadata are likely benign design choices but are important to understand and verify before use.
Capability Analysis
Type: OpenClaw Skill Name: market-beats Version: 1.0.0 The skill bundle acts as a 'thin client' that proxies all execution to a remote server (claw-uat.ebonex.io) rather than running logic locally. It contains scripts (prana_skill_client.py and prana_skill_client.js) that automatically fetch API credentials from a remote endpoint and persist them to a local file (config/api_key.txt). Additionally, SKILL.md and skill.yaml contain explicit instructions to the AI agent to 'pass through' remote results without summarization or modification, which is a form of prompt injection designed to bypass the agent's typical filtering or oversight capabilities.
Capability Assessment
Purpose & Capability
The skill's description promises 24/7 news crawling and a frontend, but the package contains only an encapsulation thin client (Python/Node) that forwards input to a remote Prana/Claw service (the real scraping/execution happens server-side). This is plausible for an encapsulated skill, but could mislead users who expect local scraping/frontend code to be present.
Instruction Scope
SKILL.md and the scripts instruct the runner to call /api/claw/agent-run and /api/claw/agent-result and to deliver those responses raw to end users. The scripts also auto-fetch API keys (GET /api/v1/api-keys) from a base URL and will write credentials to config/api_key.txt by default. The runtime thus reads/writes local credential files and transmits user input to a remote service; these actions are outside what a user might assume from the local description and the registry's 'no required env vars' claim.
Install Mechanism
No arbitrary downloads or novel install mechanism. Node runner requires npm install to obtain the 'yaml' dependency (declared in package.json). There is no extract-from-URL or untrusted binary download in the package.
Credentials
Although registry metadata lists no required env vars, the scripts expect/accept sensitive credentials (PRANA_SKILL_PUBLIC_KEY / PRANA_SKILL_SECRET_KEY or PRANA_SKILL_API_KEY) or will auto-request them from a default base URL. The client will persist public_key:secret_key to config/api_key.txt by default (unless PRANA_SKILL_SKIP_WRITE_API_KEY=1). The default base URL is a UAT domain (https://claw-uat.ebonex.io/), which may be unexpected; asking for/auto-creating API keys and writing them to disk should be considered privileged behavior and requires trusting the remote service.
Persistence & Privilege
always:false and no global privileges requested. The client will persist API keys to config/api_key.txt by default and may create a local config directory; it does not modify other skills. Writing credentials locally is the primary persistence behavior to be aware of.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install market-beats
  3. After installation, invoke the skill by name or use /market-beats
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
市场实时快讯 1.0.0 发布:实现多源财经新闻秒级推送与美观展示 - 实现7x24小时财经新闻的聚合与实时展示 - 支持金十数据等多家财经资讯源的秒级推送 - 提供WebSocket接口,实现即时推送最新动态 - 美观前端界面,方便用户直观浏览快讯 - 详细说明客户端与API对接方式,确保对接一致性
Metadata
Slug market-beats
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is market-beats?

7x24小时财经新闻实时爬取与展示。支持金十数据等多个财经新闻源的实时爬取,通过WebSocket实现秒级推送,提供美观的前端界面展示最新财经资讯。适用于需要实时监控财经动态的场景。 It is an AI Agent Skill for Claude Code / OpenClaw, with 94 downloads so far.

How do I install market-beats?

Run "/install market-beats" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is market-beats free?

Yes, market-beats is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does market-beats support?

market-beats is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created market-beats?

It is built and maintained by luokeer52 (@luokeer52); the current version is v1.0.0.

💬 Comments