← 返回 Skills 市场

FireAnt Stock Price Checker

Name: FireAnt Stock Price Checker
Author: aholake

作者 Loc Vo · GitHub ↗ · v1.1.0

cross-platform ⚠ suspicious

576

总下载

当前安装

版本数

在 OpenClaw 中安装

/install fireant-stock

功能描述

Automated Vietnamese stock price and index checking on FireAnt.vn. Use when checking current stock prices, market indices, trading volumes, or financial info...

使用说明 (SKILL.md)

FireAnt Stock Price Checker

Overview

Automatically retrieves real-time stock information from FireAnt.vn for Vietnamese equities. Handles the full workflow from searching to data extraction and formatting.

Quick Start

Check a single stock:

scripts/check_stock.py DPM

Check multiple stocks:

scripts/check_stock.py VCB FPT BID

Core Workflow

Search - Uses Google search to find the FireAnt stock page for the symbol
Navigate - Opens the FireAnt stock page via Agent Browser (Rust headless browser automation)
Extract - Parses current price, volume, market cap, and key statistics from page snapshot
Format - Returns structured data in readable format

Requirements

Agent Browser - Fast Rust-based headless browser (agent-browser CLI must be installed)
Python 3.x with standard libraries (sys, re, subprocess, json, typing)

Supported Data

For Stocks:

Current Price - Real-time price with change percentage
Trading Data - Volume, value, opening/high/low prices
Market Metrics - Market cap, beta, P/E ratio, reference price
Technical Analysis - Moving averages (MA10, MA50)
Company Info - Full company name, stock exchange listing

For Indices (VNINDEX, HNX30, VN30, etc.):

Current Index - Real-time index value with change percentage
Trading Data - Total volume, matched volume, value traded
Foreign Trading - NĐTNN (foreign investor) buy/sell activity and net position
Technical Analysis - Moving averages (MA10, MA50)
Market Overview - Reference price, opening, high/low range

Usage Patterns

Single stock inquiry: "Check giá cổ phiếu DPM" "What's the current price of VCB?"

Multiple stocks: "Compare VCB, BID, and CTG prices" "Show me bank stocks: VCB BID CTG"

Market indices: "Check VNINDEX" "How is the market doing today?" (→ VNINDEX) "Show me VN30 index"

Mixed (stocks + index): "Check ACB, L18, AAA và VNINDEX" "Give me tech stocks and market index: FPT VNM VNINDEX"

Market research: "Find information about DPM stock on FireAnt" "Get latest trading data for FPT"

Scripts

scripts/check_stock.py

Main script that automates the full stock checking workflow for one or more symbols (stocks or indices).

Usage: python3 scripts/check_stock.py \x3CSYMBOL1> [SYMBOL2] ...

Examples:

# Check stocks
python3 scripts/check_stock.py ACB VCB FPT

# Check index
python3 scripts/check_stock.py VNINDEX

# Check mixed
python3 scripts/check_stock.py ACB L18 AAA VNINDEX

Returns: Formatted stock/index data including price/index value, volume, and key metrics.

Note: FireAnt URL format is the same for both stocks and indices: https://fireant.vn/ma-chung-khoan/{SYMBOL}

安全使用建议

This skill appears to do what it says (fetch and parse FireAnt pages) but review before use: 1) Inspect and, if needed, modify the hard-coded agent-browser path in scripts/check_stock.py — it should call a trusted binary on PATH, not /Users/loc/Library/…; 2) Verify the source and integrity of the 'agent-browser' CLI before installing/running it; 3) Note the metadata mismatch (slug 'vietstock' vs registry 'fireant-stock') — this may indicate sloppy packaging; 4) Run the script in an isolated environment (sandbox/container) first, and open the snapshot output to ensure it contains only public web content; 5) If you need to permit autonomous invocation, be extra cautious because the script will execute a local binary. If you cannot verify the agent-browser binary's origin, do not run this skill.

功能分析

Type: OpenClaw Skill Name: fireant-stock Version: 1.1.0 The skill is classified as suspicious due to its use of `subprocess.run` in `scripts/check_stock.py` to execute an external binary (`agent-browser`) with user-controlled input (stock symbols). While the script uses a list of arguments for `subprocess.run`, which mitigates direct shell injection from the Python side, executing external binaries with user input always introduces a higher risk profile, as vulnerabilities could exist within the `agent-browser` tool itself or its argument parsing. Additionally, the `agent-browser` executable path is hardcoded (`/Users/loc/Library/pnpm/agent-browser`), which is a minor concern for portability and environment consistency, though not a direct security vulnerability. No clear evidence of intentional malicious behavior (e.g., data exfiltration, backdoors, prompt injection within SKILL.md) was found.

能力评估

ℹ Purpose & Capability

Name/description (FireAnt stock/index lookup) aligns with the included script which opens FireAnt URLs and extracts prices/stats. Minor inconsistencies: _meta.json.slug is 'vietstock' while registry slug is 'fireant-stock', and SKILL.md mentions performing a Google search to find pages but the script simply constructs the FireAnt URL directly. The declared dependency on an 'agent-browser' CLI is reasonable for a headless browser workflow.

⚠ Instruction Scope

SKILL.md restricts actions to opening FireAnt pages via an Agent Browser and extracting data. However, the script invokes an external binary via subprocess.run using a hard-coded, user-specific absolute path '/Users/loc/Library/pnpm/agent-browser' rather than a generic 'agent-browser' on PATH. Executing arbitrary binaries at absolute paths is risky and non-portable; this is the main scope/behavior concern. The script does not access environment variables, other files, or external endpoints beyond the target site.

ℹ Install Mechanism

There is no install spec. The skill expects an external 'agent-browser' CLI but does not provide an installation step or verified source for that dependency. This increases friction and risk because a user must supply/install the dependency themselves; verify you obtain agent-browser from a trusted upstream.

✓ Credentials

The skill requests no environment variables, no credentials, and no config paths. The lack of requested secrets is proportionate to the stated purpose.

✓ Persistence & Privilege

always is false and the skill does not request persistent or elevated privileges. It does not modify other skills or system configs. Autonomous invocation is allowed by default (disable-model-invocation=false) which is normal for skills and not, by itself, a concern.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install fireant-stock
安装完成后，直接呼叫该 Skill 的名称或使用 /fireant-stock 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.1.0

Refactored to use Agent Browser (Rust headless browser) instead of openclaw CLI for better performance and reliability

元数据

Slug fireant-stock

版本 1.1.0

许可证 —

累计安装 0

当前安装数 0

历史版本数 1

常见问题