← Back to Skills Marketplace
1028986368

GF Realtime Stock

by jollyzhang · GitHub ↗ · v0.3.0 · MIT-0
cross-platform ⚠ suspicious
45
Downloads
0
Stars
0
Active Installs
4
Versions
Install in OpenClaw
/install gf-realtime-stock
Description
Query real-time stock quotes through GF MCP fund_data_test and resolve fuzzy stock names through news_stock_know_all when users ask for latest price, real-ti...
README (SKILL.md)

GF Realtime Stock

Use this skill to query real-time stock quotes through GF MCP fund_data_test. If the user gives a stock name or abbreviation, resolve it to stock code first through GF MCP news_stock_know_all.

Configuration

Read the MCP token from GF_MCP_AUTH_TOKEN. ClawHub should collect this through its sensitive environment-variable configuration UI.

Never ask the user to paste the token into chat. Never print the token. If the environment variable is missing, tell the user to create a token at:

https://mcp.gf.com.cn/cms/tokens

Then configure it as the sensitive environment variable GF_MCP_AUTH_TOKEN in ClawHub or the host app. Do not paste the token into chat.

Workflow

Use scripts/quote.mjs for real-time quote queries.

node scripts/quote.mjs 000776
node scripts/quote.mjs 腾讯控股 广发证券

If the user gives a stock name or abbreviation, the script calls stk_base_info_get to resolve listed stock codes before querying quotes.

The underlying quote MCP tool supports multiple stock codes and requires SQL-style quoted stock code strings. The script handles this automatically. Do not call the quote tool directly with raw 000776; the MCP argument must be:

{
  "stock_code": "'000776'"
}

For multiple stocks, pass one MCP call with a comma-separated quoted value:

{
  "stock_code": "'00700','000776'"
}

Call Sequence

For each stock name or abbreviation, call stk_base_info_get on news_stock_know_all:

{
  "conditions": [
    "contain,abbr_name,'模糊的股票名称'",
    "eq,list_stat_cd,'1'"
  ],
  "fields": ["scr_cd"],
  "pagesize": "20",
  "pageindex": "1"
}

Collect all returned scr_cd values. Preserve multiple listed matches.

Then call news_real_time_stock on fund_data_test once with all resolved codes:

{
  "stock_code": "'00700','000776'"
}

Output

The script outputs JSON. Use exact quotes records whose stock_code matches the requested codes. Present only useful quote fields to the user. If a fuzzy name resolves to multiple listed stock codes, show all matching quote records and include the resolution details.

MCP Details

Quote endpoint:

https://mcp-api.gf.com.cn/server/mcp/fund_data_test/sse

Quote tool:

news_real_time_stock

Name lookup endpoint:

https://mcp-api.gf.com.cn/server/mcp/news_stock_know_all/sse

Name lookup tool:

stk_base_info_get

For fuzzy stock name lookup, always use:

{
  "conditions": [
    "contain,abbr_name,'模糊的股票名称'",
    "eq,list_stat_cd,'1'"
  ],
  "fields": ["scr_cd"],
  "pagesize": "20",
  "pageindex": "1"
}

list_stat_cd = 1 limits results to listed companies.

Safety

  • Do not expose Authorization, bearer tokens, session IDs, raw MCP headers, or raw SSE endpoint query strings.
  • Do not log tokens.
  • Never ask the user to send the token in chat. Use platform-managed secrets.
  • If multiple records are returned, select the exact stock_code match.
  • If a fuzzy name resolves to multiple listed stock codes, return all matching quote records and include the resolution details.
  • If a fuzzy name resolves to no stock code, report the unresolved input.
  • If the MCP returns 401 or no allow access, ask the user to verify GF_MCP_AUTH_TOKEN and token permissions.
  • If the MCP returns 请填写签名认证参数, report that the MCP connected but the downstream API signature configuration is missing.
Usage Guidance
This looks purpose-aligned and not malicious from the provided artifacts. Before installing, make sure you trust the publisher and GF MCP service, use a scoped/revocable token, configure it only as a secret environment variable, and expect your stock quote queries to be sent to GF MCP.
Capability Analysis
Type: OpenClaw Skill Name: gf-realtime-stock Version: 0.3.0 The skill is a legitimate tool for querying real-time stock quotes from GF Securities (gf.com.cn) via their MCP API. The implementation in `scripts/quote.mjs` correctly handles sensitive authentication tokens by passing them only to the official endpoints and includes explicit instructions in `SKILL.md` to prevent the agent from leaking the `GF_MCP_AUTH_TOKEN` in chat logs. The code is well-structured, lacks obfuscation, and contains no evidence of malicious intent or data exfiltration.
Capability Tags
requires-oauth-tokenrequires-sensitive-credentials
Capability Assessment
Purpose & Capability
The stated purpose is real-time stock quote lookup and fuzzy stock-name resolution, and the code only calls the declared GF MCP quote and lookup endpoints for that workflow.
Instruction Scope
The instructions are bounded to quote/name lookup and explicitly warn not to ask for, print, or log the token.
Install Mechanism
There is no install spec or package installation, and the included Node script has no external package imports. The source/homepage are unknown, so provenance is limited.
Credentials
The skill requires the sensitive GF_MCP_AUTH_TOKEN and sends it as a bearer token to GF MCP endpoints, which is expected for the stated integration.
Persistence & Privilege
No file writes, background workers, persistent memory, privilege escalation, or destructive actions are shown in the provided artifacts.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install gf-realtime-stock
  3. After installation, invoke the skill by name or use /gf-realtime-stock
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.3.0
Restore executable skill with fuzzy stock name lookup via news_stock_know_all/stk_base_info_get and batched real-time quotes via fund_data_test/news_real_time_stock.
v0.2.0
Scanner-friendly redesign: instruction-only package with declared sensitive GF_MCP_AUTH_TOKEN and host-managed MCP access; removed bundled runtime scripts.
v0.1.1
Security update: rely on ClawHub sensitive environment variable configuration for GF_MCP_AUTH_TOKEN and remove local token setup helper from the published package.
v0.1.0
Initial release: resolve fuzzy stock names through GF MCP and query batched real-time quotes securely via GF_MCP_AUTH_TOKEN.
Metadata
Slug gf-realtime-stock
Version 0.3.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 4
Frequently Asked Questions

What is GF Realtime Stock?

Query real-time stock quotes through GF MCP fund_data_test and resolve fuzzy stock names through news_stock_know_all when users ask for latest price, real-ti... It is an AI Agent Skill for Claude Code / OpenClaw, with 45 downloads so far.

How do I install GF Realtime Stock?

Run "/install gf-realtime-stock" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is GF Realtime Stock free?

Yes, GF Realtime Stock is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does GF Realtime Stock support?

GF Realtime Stock is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created GF Realtime Stock?

It is built and maintained by jollyzhang (@1028986368); the current version is v0.3.0.

💬 Comments