← Back to Skills Marketplace
fengxiaozi-liu

Global Market Feed

by fengxiaozi-liu · GitHub ↗ · v1.0.1 · MIT-0
cross-platform ⚠ suspicious
290
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install datatk-quote
Description
Real-time stock market data via QuoteNode API. Query quotes, K-lines, tick trades, Level-2 depth, and trading calendars for US/HK/CN markets.
README (SKILL.md)

\r \r

QuoteNode REST\r

\r Use this skill for QuoteNode REST market-data integration. WebSocket is out of scope.\r \r

Project Overview\r

\r

  • QuoteNode is a market-data aggregation service that exposes a unified REST OpenAPI surface to downstream callers.\r
  • Downstream clients authenticate with the X-API-KEY header and send JSON request bodies.\r
  • The REST path is handled by OpenAPI authorization middleware, which centralizes ak, endpoint, market, permission, and rate-limit handling.\r \r For background, read:\r
  • references/architecture.md\r \r

Quick Start\r

\r

# copy example env file, then edit env.json to add your endpoint and apiKey\r
cp {baseDir}/env.json.example {baseDir}/env.json\r
\r
# test with a sample request\r
node {baseDir}/scripts/request.mjs --path /Api/V1/Quotation/Detail --body '{"instrument":"US|AAPL","lang":"en"}'\r
```\r
\r
## Workflow\r
\r
1. Start with `references/openapi.md` to choose the endpoint and request parameters.\r
2. If you need market codes, enum values, adjustment types, or error codes, read `references/reference.md`.\r
3. If you need response structure or field meanings, read `references/response.md`.\r
4. If you need the architectural position of the REST layer in this project, read `references/architecture.md`.\r
\r
## Script\r
\r
- `scripts/request.mjs`: generic POST caller for any REST endpoint.\r
\r
Notes:\r
- All requests read `endpoint` and `apiKey` from `datatk-quote-skill/env.json`.\r
- `request.mjs --body` must be valid JSON.\r
- The script prints the raw JSON response by default. If the HTTP status is not `200`, it prints the status code and response body.\r
- Get `endpoint` and `apiKey` from the [dataTrack service page](https://www.datatk.com/service).\r
- Configure `endpoint` and `apiKey` in `datatk-quote-skill/env.json`.\r
- If you are unsure about parameter values, market codes, or error codes, read `references/reference.md` first. If you are unsure about response fields, read `references/response.md`.\r
Usage Guidance
This skill appears to be a small, focused REST client for QuoteNode, but there are a few things to check before installing: - Expect to provide two secrets: an endpoint URL and an API key. The code reads these from datatk-quote-skill/env.json, but the registry metadata did not declare any required credentials — confirm where you must store the API key and treat it as a secret. - Fix the example filename mismatch: SKILL.md suggests env.json.example, but the repository includes env.example.json. Ensure you create datatk-quote-skill/env.json with the correct keys (endpoint and apiKey) and do not commit it to source control. - The script contains safety checks: it requires HTTPS, disallows raw IPs, and allowlists datatk.com domains. Review that allowlist if you intend to use a private gateway. - Because the API key is stored locally (not a declared platform credential), be careful about backups, repositories, or logs that might include it. Prefer using platform-managed secrets if available. - You can test the script locally (node scripts/request.mjs --path /Api/V1/... --body '{...}') to confirm behavior. If you rely on automated agent invocation, consider whether you want the agent to have access to the local env.json; if not, do not enable autonomous invocation for this skill. If you need, I can produce a short checklist or patch suggestions to: (1) correct the example filename, and (2) update the skill metadata to declare the required credential so the platform can handle it more safely.
Capability Analysis
Type: OpenClaw Skill Name: datatk-quote Version: 1.0.1 The skill provides a legitimate interface for querying stock market data via the QuoteNode API. The core script, `scripts/request.mjs`, implements several security best practices, including enforcing HTTPS, preventing directory traversal in API paths, and restricting outbound requests to an allowlist of authorized domains (quote.datatk.com and www.datatk.com). No evidence of data exfiltration, malicious execution, or prompt injection was found.
Capability Assessment
Purpose & Capability
The skill's name/description align with the included code and docs (it implements a generic POST caller for QuoteNode REST endpoints). However, the registry metadata declares no required credentials/config, while both SKILL.md and scripts/request.mjs expect an endpoint and an apiKey in a local env.json — this is an inconsistency (the skill needs secrets but doesn't advertise them).
Instruction Scope
The runtime instructions are narrowly scoped: the script only reads a local datatk-quote-skill/env.json, validates the endpoint (https and datatk.com allowlist), checks the path starts with /Api/, and POSTs JSON to the allowlisted domain. That scope is appropriate for a market-data integration. Two issues: SKILL.md's quick-start uses a filename `env.json.example` while the package contains `env.example.json` (typo), and the SKILL.md/registry do not declare that the skill requires storing an API key locally.
Install Mechanism
There is no install spec (instruction-only skill with a small utility script). Nothing is downloaded or written by an installer. Risk from install mechanism is low.
Credentials
The script requires an API key and endpoint (stored in datatk-quote-skill/env.json) but the skill metadata lists no required env vars or primary credential — a mismatch. The API key is a sensitive secret; the skill reads it from a local file rather than from declared platform-managed credentials, which increases the chance of accidental exposure if users commit or share the file.
Persistence & Privilege
The skill does not request permanent presence (always:false) and does not modify other skills or system settings. It runs on demand and does not persist elevated privileges.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install datatk-quote
  3. After installation, invoke the skill by name or use /datatk-quote
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
- Added env.json.example to guide environment configuration. - Removed redundant and localized documentation files. - Updated SKILL.md with clearer quick-start instructions for setting up env.json. - No changes to code or core functionality.
v1.0.0
datatk-quote-skill v1.0.0 - Initial release providing a REST integration skill for QuoteNode, a market-data aggregation service. - Includes guidance for selecting endpoints, building requests, interpreting responses, and handling market or error codes. - Provides a generic Node.js script for sending authenticated requests and handling responses. - Documentation outlines workflow steps and references for endpoint selection, request/response structure, and parameter clarification. - Configuration instructions for accessing API via the dataTrack service page and setting up API keys.
Metadata
Slug datatk-quote
Version 1.0.1
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 2
Frequently Asked Questions

What is Global Market Feed?

Real-time stock market data via QuoteNode API. Query quotes, K-lines, tick trades, Level-2 depth, and trading calendars for US/HK/CN markets. It is an AI Agent Skill for Claude Code / OpenClaw, with 290 downloads so far.

How do I install Global Market Feed?

Run "/install datatk-quote" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Global Market Feed free?

Yes, Global Market Feed is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Global Market Feed support?

Global Market Feed is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Global Market Feed?

It is built and maintained by fengxiaozi-liu (@fengxiaozi-liu); the current version is v1.0.1.

💬 Comments