← 返回 Skills 市场

Baidu Finance Search

Name: Baidu Finance Search
Author: huangrichao2020

作者 huangrichao2020 · GitHub ↗ · v1.0.2 · MIT-0

cross-platform ⚠ suspicious

223

总下载

当前安装

版本数

在 OpenClaw 中安装

/install baidu-finance-search

功能描述

百度财经搜索 skill。基于超哥方法论定制，支持雪球/知乎/东方财富/同花顺等站点的财经舆情搜索，适合短线情绪博弈和事件驱动分析。

使用说明 (SKILL.md)

百度财经搜索 Skill

基于超哥方法论定制的财经搜索工具，使用百度千帆 AI 搜索（web_summary）接口。

核心能力

场景	站点	用途
短线主线（情绪博弈）	雪球、东方财富	舆情热度、资金动向
短线非主线（事件驱动）	东方财富、同花顺	公告、政策、财报
中线（趋势跟随）	知乎、雪球	板块轮动分析

API 信息

项目	值
Endpoint	`https://qianfan.baidubce.com/v2/ai_search/web_summary`
认证	`Authorization: Bearer {API_KEY}`
请求方式	POST

使用方式

命令行调用

python3 skills/baidu-finance-search/scripts/search.py '\x3CJSON参数>'

快捷搜索

# A股行情分析
python3 skills/baidu-finance-search/scripts/search.py '{
  "query": "如何看待今日A股行情",
  "sites": ["xueqiu.com", "www.eastmoney.com"]
}'

# 板块轮动分析
python3 skills/baidu-finance-search/scripts/search.py '{
  "query": "半导体板块轮动分析",
  "sites": ["xueqiu.com", "www.zhihu.com"]
}'

# 个股舆情
python3 skills/baidu-finance-search/scripts/search.py '{
  "query": "宁德时代 最新讨论",
  "sites": ["xueqiu.com"],
  "time_range": "3d"
}'

请求参数

参数	类型	必填	默认值	说明
`query`	string	✅ 是	-	搜索问题
`sites`	list	否	雪球、东财	搜索站点列表
`time_range`	string	否	无	时间范围（1d/3d/1w/1m）
`top_k`	int	否	10	返回结果数量
`instruction`	string	否	金融专家	系统指令

预设站点

站点	域名	说明
雪球	xueqiu.com	股民社区
东方财富	www.eastmoney.com	财经门户
同花顺	www.10jqka.com.cn	财经门户
知乎	www.zhihu.com	知识问答

配置

在 skills/.env 中配置：

BAIDU_API_KEY=bce-v3/ALTAK-xxx

与方法论对应

方法论场景	推荐站点	示例查询
短线主线-情绪博弈	雪球、东财	"如何看待今日A股行情"
短线非主线-事件驱动	东财、同花顺	"XX股票公告解读"
中线-趋势跟随	知乎、雪球	"半导体板块轮动分析"

安全使用建议

Before installing, be aware of three issues: (1) the skill needs a BAIDU_API_KEY even though the registry metadata doesn't declare it — verify the key's scope and origin and avoid reusing high-privilege keys; (2) the script looks for a .env two levels up, which can read project-level secrets unintentionally — check which .env it will load or place the API key only in the intended skills/.env; (3) the script disables SSL certificate verification when contacting Baidu, which makes the API key and responses vulnerable to network interception — ask the author to remove the SSL disablement (use default SSL verification) before using in any sensitive environment. If you still want to use it, inspect or run the script in an isolated environment, provide a limited-scope token if possible, and consider rotating the BAIDU_API_KEY after testing.

功能分析

Type: OpenClaw Skill Name: baidu-finance-search Version: 1.0.2 The skill implements a finance search tool using the Baidu Qianfan API. A significant security vulnerability is present in `scripts/search.py`, where SSL certificate verification is explicitly disabled (`ssl.CERT_NONE`), exposing the `BAIDU_API_KEY` and search queries to potential interception via man-in-the-middle attacks. While the code logic aligns with the stated purpose and no intentional data exfiltration was found, this high-risk implementation detail warrants a suspicious classification.

能力评估

⚠ Purpose & Capability

The code implements the advertised Baidu web_summary search and targets the same API endpoint described in SKILL.md, so functionality matches the purpose. However, the skill requires a BAIDU_API_KEY (documented in SKILL.md and used by scripts/search.py) but the registry metadata lists no required environment variables — this mismatch is an incoherence in declared requirements.

⚠ Instruction Scope

SKILL.md only instructs the agent to set BAIDU_API_KEY in skills/.env and run the script. The script, however, will also attempt to read a .env file two levels up from the script directory (potentially the repository/project root) to find BAIDU_API_KEY, which is broader than the single-file configuration described. The script sends the API key to the stated Baidu endpoint and does not exfiltrate other files, but it explicitly disables SSL verification (ctx.check_hostname = False; ctx.verify_mode = ssl.CERT_NONE), which undermines the security of communications and could expose the API key to network interception.

✓ Install Mechanism

There is no install spec (instruction-only plus a small script). Nothing is downloaded or installed by the skill, and no third-party packages are pulled in automatically.

⚠ Credentials

The only secret the code needs is BAIDU_API_KEY, which is proportionate to the stated purpose. However, the skill's registry metadata does not declare this required environment variable even though both SKILL.md and the script depend on it. Additionally, the script will search for BAIDU_API_KEY in a parent .env file (../../.env), which can expose or reuse a project-level secret unintentionally.

✓ Persistence & Privilege

The skill does not request persistent or elevated privileges. always is false, and there is no install step that modifies other skills or system-wide configs.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install baidu-finance-search
安装完成后，直接呼叫该 Skill 的名称或使用 /baidu-finance-search 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.2

baidu-finance-search 1.0.2 Changelog - Updated skill version metadata from 1.0.0 to 1.0.1. - No changes in code, features, or functionality. - Documentation version was incremented to be consistent with the versioning scheme.

v1.0.1

Version 1.0.1 - Added _meta.json for improved metadata and skill management. - Updated SKILL.md: streamlined documentation, clarified supported sites, and added configuration section. - Minor improvements to scripts/search.py.

v1.0.0

- Initial release of baidu-finance-search, a financial sentiment search tool for A股 based on Baidu Qianfan AI search. - Supports sentiment and event-driven searches across major finance communities: Xueqiu, Zhihu, Eastmoney, 10jqka, Xinlang Finance. - Enables filtered searches by site and time range for short-term sentiment, event analysis, or trend tracking. - Simple command-line interface; requires only Python standard library. - Supports custom API Key configuration and several flexible query parameters for tailored results.

元数据

Slug baidu-finance-search

版本 1.0.2

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 3

常见问题