← 返回 Skills 市场

AIGroup Market MCP

Name: AIGroup Market MCP
Author: jackdark425

作者 jackdark · GitHub ↗ · v0.1.3 · MIT-0

cross-platform ⚠ suspicious

189

总下载

当前安装

版本数

在 OpenClaw 中安装

/install aigroup-market-mcp

功能描述

Use `aigroup-market-mcp` for China-market and Tushare-oriented data. Route A-share, index, sector, fund-flow, margin, block-trade, dragon-tiger, fund, conver...

使用说明 (SKILL.md)

Market MCP

Use aigroup-market-mcp for China-market datasets.

Operations

stock_data
stock_data_minutes
basic_info
company_performance
company_performance_hk
company_performance_us
index_data
csi_index_constituents
money_flow
margin_trade
block_trade
dragon_tiger_inst
fund_data
fund_manager_by_name
convertible_bond
macro_econ
finance_news
hot_news_7x24

Dependency

Server name: aigroup-market-mcp
Launch pattern: npx -y aigroup-market-mcp
Required environment variable: TUSHARE_TOKEN

安全使用建议

This skill appears to do what it claims (China-market/Tushare data) and only requires TUSHARE_TOKEN. However it relies on running `npx -y aigroup-market-mcp` at runtime, which will fetch and execute code from npm — that code would have access to any environment variables (including your TUSHARE_TOKEN) and to the runtime environment. Before installing or enabling the skill: 1) verify the npm package and the GitHub repo (author, recent activity, stars, issues); 2) review the package source (or prefer a pinned, audited release) to ensure it doesn't exfiltrate data or perform unexpected actions; 3) consider running it in a sandbox or isolated environment first; 4) avoid supplying other unrelated secrets; 5) if you want tighter control, ask the skill author for an explicit install spec or for a way to use a locally-installed, reviewed binary rather than npx. If you are uncomfortable with dynamic remote execution, treat this skill as higher risk.

能力评估

✓ Purpose & Capability

Name, description, operations, and the single required environment variable (TUSHARE_TOKEN) align with a Tushare/China-market data provider. The agent dependency name 'aigroup-market-mcp' and referenced GitHub homepage are consistent with the stated purpose.

ℹ Instruction Scope

SKILL.md limits actions to market data operations and explicitly requires TUSHARE_TOKEN. However it instructs launching the MCP with `npx -y aigroup-market-mcp` (runtime execution of an external package). The instructions do not ask for additional unrelated files or env vars, but running npx executes third-party code which could access any environment data available to the process.

⚠ Install Mechanism

There is no formal install spec, but the declared launch pattern directs the agent to run `npx -y aigroup-market-mcp`, which will dynamically download and execute code from the npm registry. Dynamically executing unreviewed remote packages increases risk (code can run arbitrary actions and exfiltrate data).

✓ Credentials

Only TUSHARE_TOKEN is required, which is appropriate for a Tushare-backed data provider. That said, providing this token to a package fetched and executed at runtime grants the remote code access to that secret — this is expected but worth verifying before granting.

✓ Persistence & Privilege

The skill does not request always:true or any system-wide config changes. agents/openai.yaml sets allow_implicit_invocation: true (the agent may call the MCP automatically), which is the platform default; consider disabling implicit invocation if you want manual control.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install aigroup-market-mcp
安装完成后，直接呼叫该 Skill 的名称或使用 /aigroup-market-mcp 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v0.1.3

Reduce moderation false positives with minimal routing copy

v0.1.2

Reduce moderation false positives with terser routing copy

v0.1.1

Tighten skill copy and add project homepage metadata

v0.1.0

Initial ClawHub release

元数据

Slug aigroup-market-mcp

版本 0.1.3

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 4

常见问题