← 返回 Skills 市场

Beta Market Brief

Name: Beta Market Brief
Author: 1477009639zw-blip

作者 1477009639zw-blip · GitHub ↗ · v1.0.0 · MIT-0

cross-platform ⚠ suspicious

总下载

当前安装

版本数

在 OpenClaw 中安装

/install beta-market-brief

功能描述

Generate a concise Chinese market brief for the trader agent using Tiger API first and Yahoo Finance as supplement. Use for hourly market snapshots, trader b...

使用说明 (SKILL.md)

Tiger Market Brief

Use this skill when the user asks for:

market brief
每小时市场简报
trader 简报
用 Tiger API 拉市场快照

Required Command

Always run:

/Users/zhouwen/.openclaw/workspace-papertrader/venv/bin/python \
  /Users/zhouwen/.openclaw/workspace-papertrader/scripts/tiger_market_brief.py \
  --mode hourly

Rules

Use Tiger API for market data first
If US real-time quote permission is unavailable, use Tiger delayed briefs and state that clearly
Use Yahoo Finance only for supplementary items such as VIX, US10Y, BTC, and headline links
Return the script output directly with minimal extra commentary

安全使用建议

This skill asks your agent to run an opaque Python script located in /Users/zhouwen/.openclaw/..., which may execute arbitrary code and access local credentials. Before installing or enabling it: (1) refuse automatic execution until you can inspect the script; (2) locate and manually review /Users/zhouwen/.openclaw/workspace-papertrader/scripts/tiger_market_brief.py to see what it does (network calls, file reads, credential usage); (3) ensure credentials (Tiger API keys, etc.) are stored and used intentionally — the skill declares none; (4) prefer a skill that either (a) calls Tiger/Yahoo via documented API calls with declared env vars, or (b) includes a safe install step that you control; (5) if you must run it, run the script in a sandboxed environment and monitor outbound connections. If you cannot inspect the referenced script or confirm its behavior, do not enable this skill.

能力评估

⚠ Purpose & Capability

Name/description match the goal (Tiger API + Yahoo Finance). However, the skill requires running a specific local script in /Users/zhouwen/.openclaw/..., which is not justified by the metadata (no install, no required env). Referencing a private absolute path is disproportionate and not portable.

⚠ Instruction Scope

The SKILL.md commands the agent to always execute an absolute path to a Python script in a user's home directory. That gives the skill the ability to run arbitrary code and access local files/credentials via that script; the skill does not document what the script does or what data it will read or transmit.

⚠ Install Mechanism

There is no install spec (instruction-only), which is low risk in general, but here the runtime instruction forces execution of an existing local binary/script. That effectively delegates execution risk to an opaque file on disk and should be treated as an install/exec risk.

⚠ Credentials

The skill declares no required environment variables or credentials, yet it instructs use of Tiger API (which normally requires keys). This implies the local script must contain or fetch credentials; the skill provides no justification or declaration for that access, which is disproportionate and opaque.

✓ Persistence & Privilege

The skill does not request always:true and does not declare persistent installation. It is user-invocable and can be invoked autonomously by the agent (default), which increases the impact of the other concerns but is not itself a misconfiguration here.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install beta-market-brief
安装完成后，直接呼叫该 Skill 的名称或使用 /beta-market-brief 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

Initial release — hourly market briefing skill for Beta agents

元数据

Slug beta-market-brief

版本 1.0.0

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 1

常见问题