← Back to Skills Marketplace
股票简单查询
by
gaoren36-arch
· GitHub ↗
· v1.0.0
· MIT-0
258
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install gaoren-stock-simple
Description
股票简单分析 - A股/港股/美股实时行情快速查询
README (SKILL.md)
Stock Analyst Simple - 股票简单分析
简介
股票快速查询工具，简单直接获取A股、港股和美股的实时行情。
数据源
| 市场 | 数据源 |
|---|---|
| A股 | 腾讯财经API |
| 港股 | 腾讯财经API |
| 美股 | Finnhub API |
支持的股票代码
A股 (6位数)
601857 中国石油 | 600519 贵州茅台 | 300750 宁德时代
港股 (5位数)
00700 腾讯 | 09988 阿里巴巴 | 02618 京东物流
美股 (英文)
JD 京东 | BABA 阿里巴巴 | TSLA 特斯拉
使用方式
查一下 601857
看看腾讯
茅台多少钱
输出示例
【中国石油】601857
价格: 12.14 CNY
涨跌: +0.01 (+0.28%)
Usage Guidance
This skill largely does what it says (fetches stock quotes from Tencent and Finnhub), but the code includes a hardcoded Finnhub API key baked into simple_stock.py and doesn't formally declare the requests dependency. Hardcoded API keys can be abused by whoever controls the code and may cause unexpected rate limits or privacy issues. Before installing or running: 1) Prefer a version that accepts your own FINNHUB API key via an environment variable (e.g., FINNHUB_KEY) instead of a hardcoded token. 2) Confirm you trust the endpoints (qt.gtimg.cn and finnhub.io) because queries will be sent there. 3) Install requests in a controlled environment (virtualenv) and audit network access if needed. 4) If you rely on privacy or corporate network controls, do not run code that makes outbound HTTP requests without review. If the author cannot justify the embedded key or provide an env-var-based option, treat the package as risky.
Capability Analysis
Type: OpenClaw Skill
Name: gaoren-stock-simple
Version: 1.0.0
The skill contains a hardcoded Finnhub API key in `simple_stock.py`, which is a security vulnerability (credential exposure). Additionally, while the A-share lookup includes input validation, the US stock lookup (`get_us_stock`) lacks sanitization for the stock symbol, potentially allowing for URL parameter injection. These issues appear to be unintentional security flaws rather than deliberate malice, but they fall under the 'suspicious' classification for vulnerabilities.
Capability Assessment
Purpose & Capability
Name/description promise A股/港股/美股 real-time quotes; code and SKILL.md actually call Tencent (qt.gtimg.cn) for A/HK and Finnhub for US stocks, which is consistent. The skill requires Python but does not formally declare the 'requests' dependency (README mentions pip install requests).
Instruction Scope
SKILL.md and code limit actions to fetching remote quotes and printing results. The instructions do not ask the agent to read unrelated files, environment variables, or system state. Network calls go only to the documented data sources.
Install Mechanism
There is no install spec (instruction-only), so nothing is written to disk beyond included files. README suggests installing the requests package but the skill does not provide a formal requirements/install step.
Credentials
The code contains a hardcoded FINNHUB API key string (FINNHUB_KEY embedded in simple_stock.py) rather than using an environment variable; embedding a third-party credential in distributed code is risky (exposes the key, can be abused, causes accountability/rate-limit concerns). The skill requests no user credentials, so the embedded key is unexpected and disproportionate.
Persistence & Privilege
always is false and the skill is user-invocable. It does not request persistent system-level privileges or modify other skills/configuration.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install gaoren-stock-simple - After installation, invoke the skill by name or use
/gaoren-stock-simple - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of stock-analyst-simple:
- Quickly query real-time quotes for A-shares, Hong Kong stocks, and US stocks.
- Supports common stock codes (A股6位、港股5位、美股代码).
- Simple natural language triggers like "查股票", "股票行情", "多少钱".
- Data sources: 腾讯财经API (A股/港股), Finnhub API (美股).
- Compatible with Windows, macOS, and Linux.
Metadata
Frequently Asked Questions
What is 股票简单查询?
股票简单分析 - A股/港股/美股实时行情快速查询. It is an AI Agent Skill for Claude Code / OpenClaw, with 258 downloads so far.
How do I install 股票简单查询?
Run "/install gaoren-stock-simple" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is 股票简单查询 free?
Yes, 股票简单查询 is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does 股票简单查询 support?
股票简单查询 is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created 股票简单查询?
It is built and maintained by gaoren36-arch (@gaoren36-arch); the current version is v1.0.0.
More Skills