Stock Filter Skills

股票多条件筛选、热门因子管理、Jiuyan 数据查询和抖音热点分析。提供 17 个 CLI 工具覆盖四大模块。

This package appears to be a straightforward Node CLI that calls whatever API you point it at. Before installing: (1) only set STOCK_API_BASE_URL to a host you trust — the skill will send your STOCK_API_KEY in X-API-Key headers to that host; (2) create an API key with limited scope/permissions and expiration (do not reuse high-privilege keys); (3) inspect the included source (src/*.js) if you are concerned — it only uses fetch and dotenv and calls API paths under /api/v1; (4) run npm install in an isolated environment (or sandbox/container) if you want to limit risk from third-party packages; (5) avoid placing unrelated secrets in the skill directory .env because dotenv will load them. If you need higher assurance, confirm the API_BASE_URL points to your backend or a trusted provider and verify the package author/source before publishing to production.

Type: OpenClaw Skill Name: stock-filter-skills Version: 1.3.0 The skill bundle is a legitimate CLI-based toolset for stock market analysis, filtering, and social media trend tracking. It functions as a wrapper for a REST API (configured via STOCK_API_BASE_URL), using standard Node.js practices and the 'dotenv' dependency for configuration. No evidence of data exfiltration, malicious execution, or prompt injection was found across the 17 implemented tools in src/tools.js and src/main.js.