← 返回 Skills 市场
fengxiaozi-liu

Global Market Feed

作者 fengxiaozi-liu · GitHub ↗ · v1.0.1 · MIT-0
cross-platform ⚠ suspicious
290
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install datatk-quote
功能描述
Real-time stock market data via QuoteNode API. Query quotes, K-lines, tick trades, Level-2 depth, and trading calendars for US/HK/CN markets.
使用说明 (SKILL.md)

\r \r

QuoteNode REST\r

\r Use this skill for QuoteNode REST market-data integration. WebSocket is out of scope.\r \r

Project Overview\r

\r

  • QuoteNode is a market-data aggregation service that exposes a unified REST OpenAPI surface to downstream callers.\r
  • Downstream clients authenticate with the X-API-KEY header and send JSON request bodies.\r
  • The REST path is handled by OpenAPI authorization middleware, which centralizes ak, endpoint, market, permission, and rate-limit handling.\r \r For background, read:\r
  • references/architecture.md\r \r

Quick Start\r

\r

# copy example env file, then edit env.json to add your endpoint and apiKey\r
cp {baseDir}/env.json.example {baseDir}/env.json\r
\r
# test with a sample request\r
node {baseDir}/scripts/request.mjs --path /Api/V1/Quotation/Detail --body '{"instrument":"US|AAPL","lang":"en"}'\r
```\r
\r
## Workflow\r
\r
1. Start with `references/openapi.md` to choose the endpoint and request parameters.\r
2. If you need market codes, enum values, adjustment types, or error codes, read `references/reference.md`.\r
3. If you need response structure or field meanings, read `references/response.md`.\r
4. If you need the architectural position of the REST layer in this project, read `references/architecture.md`.\r
\r
## Script\r
\r
- `scripts/request.mjs`: generic POST caller for any REST endpoint.\r
\r
Notes:\r
- All requests read `endpoint` and `apiKey` from `datatk-quote-skill/env.json`.\r
- `request.mjs --body` must be valid JSON.\r
- The script prints the raw JSON response by default. If the HTTP status is not `200`, it prints the status code and response body.\r
- Get `endpoint` and `apiKey` from the [dataTrack service page](https://www.datatk.com/service).\r
- Configure `endpoint` and `apiKey` in `datatk-quote-skill/env.json`.\r
- If you are unsure about parameter values, market codes, or error codes, read `references/reference.md` first. If you are unsure about response fields, read `references/response.md`.\r
安全使用建议
This skill appears to be a small, focused REST client for QuoteNode, but there are a few things to check before installing: - Expect to provide two secrets: an endpoint URL and an API key. The code reads these from datatk-quote-skill/env.json, but the registry metadata did not declare any required credentials — confirm where you must store the API key and treat it as a secret. - Fix the example filename mismatch: SKILL.md suggests env.json.example, but the repository includes env.example.json. Ensure you create datatk-quote-skill/env.json with the correct keys (endpoint and apiKey) and do not commit it to source control. - The script contains safety checks: it requires HTTPS, disallows raw IPs, and allowlists datatk.com domains. Review that allowlist if you intend to use a private gateway. - Because the API key is stored locally (not a declared platform credential), be careful about backups, repositories, or logs that might include it. Prefer using platform-managed secrets if available. - You can test the script locally (node scripts/request.mjs --path /Api/V1/... --body '{...}') to confirm behavior. If you rely on automated agent invocation, consider whether you want the agent to have access to the local env.json; if not, do not enable autonomous invocation for this skill. If you need, I can produce a short checklist or patch suggestions to: (1) correct the example filename, and (2) update the skill metadata to declare the required credential so the platform can handle it more safely.
功能分析
Type: OpenClaw Skill Name: datatk-quote Version: 1.0.1 The skill provides a legitimate interface for querying stock market data via the QuoteNode API. The core script, `scripts/request.mjs`, implements several security best practices, including enforcing HTTPS, preventing directory traversal in API paths, and restricting outbound requests to an allowlist of authorized domains (quote.datatk.com and www.datatk.com). No evidence of data exfiltration, malicious execution, or prompt injection was found.
能力评估
Purpose & Capability
The skill's name/description align with the included code and docs (it implements a generic POST caller for QuoteNode REST endpoints). However, the registry metadata declares no required credentials/config, while both SKILL.md and scripts/request.mjs expect an endpoint and an apiKey in a local env.json — this is an inconsistency (the skill needs secrets but doesn't advertise them).
Instruction Scope
The runtime instructions are narrowly scoped: the script only reads a local datatk-quote-skill/env.json, validates the endpoint (https and datatk.com allowlist), checks the path starts with /Api/, and POSTs JSON to the allowlisted domain. That scope is appropriate for a market-data integration. Two issues: SKILL.md's quick-start uses a filename `env.json.example` while the package contains `env.example.json` (typo), and the SKILL.md/registry do not declare that the skill requires storing an API key locally.
Install Mechanism
There is no install spec (instruction-only skill with a small utility script). Nothing is downloaded or written by an installer. Risk from install mechanism is low.
Credentials
The script requires an API key and endpoint (stored in datatk-quote-skill/env.json) but the skill metadata lists no required env vars or primary credential — a mismatch. The API key is a sensitive secret; the skill reads it from a local file rather than from declared platform-managed credentials, which increases the chance of accidental exposure if users commit or share the file.
Persistence & Privilege
The skill does not request permanent presence (always:false) and does not modify other skills or system settings. It runs on demand and does not persist elevated privileges.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install datatk-quote
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /datatk-quote 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.1
- Added env.json.example to guide environment configuration. - Removed redundant and localized documentation files. - Updated SKILL.md with clearer quick-start instructions for setting up env.json. - No changes to code or core functionality.
v1.0.0
datatk-quote-skill v1.0.0 - Initial release providing a REST integration skill for QuoteNode, a market-data aggregation service. - Includes guidance for selecting endpoints, building requests, interpreting responses, and handling market or error codes. - Provides a generic Node.js script for sending authenticated requests and handling responses. - Documentation outlines workflow steps and references for endpoint selection, request/response structure, and parameter clarification. - Configuration instructions for accessing API via the dataTrack service page and setting up API keys.
元数据
Slug datatk-quote
版本 1.0.1
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 2
常见问题

Global Market Feed 是什么?

Real-time stock market data via QuoteNode API. Query quotes, K-lines, tick trades, Level-2 depth, and trading calendars for US/HK/CN markets. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 290 次。

如何安装 Global Market Feed?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install datatk-quote」即可一键安装,无需额外配置。

Global Market Feed 是免费的吗?

是的,Global Market Feed 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Global Market Feed 支持哪些平台?

Global Market Feed 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Global Market Feed?

由 fengxiaozi-liu(@fengxiaozi-liu)开发并维护,当前版本 v1.0.1。

💬 留言讨论