← 返回 Skills 市场

SZFIU Market Data Bot

Name: SZFIU Market Data Bot
Author: ulnit

作者 ULNIT · GitHub ↗ · v1.0.13 · MIT-0

cross-platform ⚠ suspicious

214

总下载

当前安装

版本数

在 OpenClaw 中安装

/install fiu-market-assistant

功能描述

FIU MCP Market Data and Trading Assistant. Use when user wants to query stock quotes, K-line, trade stocks, check positions, or analyze market data for HK/US...

使用说明 (SKILL.md)

/fiu-market-assistant — FIU Market Data & Trading

Provides stock market data query and trading capabilities via FIU MCP Server. Supports HK, US, and CN stock markets with quotes, K-line, order book, capital flow, and trading operations.

Arguments passed: $ARGUMENTS

Quick Start (One Command Setup)

# First time setup - configure MCP and set token
/fiu-market-assistant setup YOUR_FIU_MCP_TOKEN

After setup, simply use natural language:

Query Tencent Holdings quote
Show AAPL daily K-line
Buy 100 shares Tencent

Dispatch on Arguments

No args — show status

Check FIU_MCP_TOKEN - show if token is configured (masked)
Show available markets - list HK, US, CN, toolkit
Show quick commands - list available dispatch commands
What next - guide user:
- No token → "Run /fiu-market-assistant setup \x3Ctoken> to configure"
- Configured → "Ready! Ask me anything like 'Query 00700 quote'"

`setup \x3Ctoken>` — quick setup (recommended)

Save token to config file ~/.fiu-market/config
Create MCP config .mcp.json with all 7 FIU services
Test connectivity
Confirm and guide restart

`test` — test connectivity

Check FIU_MCP_TOKEN is set
Test each market endpoint with tools/list
Show which services are working
Report any errors

`discover \x3Cmarket>` — discover available tools

List all available tools for a specific market:

/fiu-market-assistant discover hk_sdk
/fiu-market-assistant discover cn_sdk

`quote \x3Csymbol>` — query quote

Query real-time quote for a stock:

/fiu-market-assistant quote 00700
/fiu-market-assistant quote AAPL
/fiu-market-assistant quote 600519

`kline \x3Csymbol> [type]` — query K-line

Query K-line data:

/fiu-market-assistant kline 00700        # daily
/fiu-market-assistant kline 00700 1      # weekly
/fiu-market-assistant kline AAPL 5       # 1-min for US

`search \x3Ckeyword>` — search stock code

Search for stock by name:

/fiu-market-assistant search 腾讯
/fiu-market-assistant search Apple

`trade \x3Caction> \x3Csymbol> \x3Cqty> [price]` — trade

Place orders (default SIMULATE mode):

/fiu-market-assistant trade buy 00700 100 380
/fiu-market-assistant trade sell AAPL 50 150
/fiu-market-assistant trade buy 600519 1000 200

`positions` — query positions

/fiu-market-assistant positions

`cash` — query cash

/fiu-market-assistant cash

`orders` — query orders

/fiu-market-assistant orders

`capflow \x3Csymbol>` — capital flow

/fiu-market-assistant capflow 00700

MCP Servers Reference

Market Endpoints

Service	Market	URL
stockHkF10	HK F10	https://ai.szfiu.com/stock_hk_f10/
stockUsF10	US F10	https://ai.szfiu.com/stock_us_f10/
stockCnF10	CN F10	https://ai.szfiu.com/stock_cn_f10/
stockHkSdk	HK SDK	https://ai.szfiu.com/stock_hk_sdk/
stockUsSdk	US SDK	https://ai.szfiu.com/stock_us_sdk/
stockCnSdk	CN SDK	https://ai.szfiu.com/stock_cn_sdk/
szfiuToolkit	Search	https://ai.szfiu.com/toolkit/

Feature Support by Market

Feature	HK (港股)	US (美股)	CN (A股)
Quote	✅	✅	✅
K-line	✅	✅	✅
Order Book	✅	✅	✅
Tick Data	✅	✅	✅
Intraday	✅	✅	✅
Capital Flow	✅	✅	✅
Capital Distribution	✅	✅	✅
Sector List	✅	✅	✅
Stock Filter	✅	✅	✅
Market Ranking	✅	✅	✅
F10 Data	✅	✅	✅
Trading	✅	✅	✅
Search	✅	✅	✅

Usage Tips

Use search first to find correct stock code
Default mode is SIMULATE - use "REAL" for real trading
HK stocks: use format 00700.HK or just 00700
US stocks: use format AAPL or AAPL.US
CN stocks: use format 600519.SZ or 000001.SZ
Rate limit: 15 orders per 30 seconds
Get token: https://ai.szfiu.com/auth/login

Important Notes

Trading defaults to SIMULATE mode for safety
Real trading requires explicit "REAL" confirmation
Always check market status before trading
The setup command will create/overwrite ~/.mcp.json (standard MCP config file)
Backup is created automatically before overwriting
Config files are stored with restricted permissions (600) - only owner can read
This skill adds 7 FIU MCP entries to your MCP configuration
Other MCP-enabled tools may also use ~/.mcp.json - review after setup if needed

安全使用建议

This skill appears to be what it claims (market data + trading via FIU MCP) and only asks for one token (FIU_MCP_TOKEN). Before installing or running: 1) Treat the FIU_MCP_TOKEN as sensitive — do not share it. 2) Review ~/.mcp.json after setup: the skill will create/overwrite that file (it does back it up as ~/.mcp.json.bak) and add seven ai.szfiu.com endpoints; if you use other MCP tools, merge rather than blindly overwrite. 3) Inspect the included scripts/install.sh yourself and run them manually if you prefer (there is no hidden remote download). 4) Start in SIMULATE mode and verify behaviour; the trade script asks for interactive confirmation for REAL trades (this may block if invoked non-interactively), so be cautious before attempting real trades. 5) Verify the ai.szfiu.com domain and the token source before entering credentials. If you want to reduce risk, keep a manual copy of your previous ~/.mcp.json and run the skill in a restricted environment first.

功能分析

Type: OpenClaw Skill Name: fiu-market-assistant Version: 1.0.13 The skill provides stock market data and trading capabilities but contains several security concerns. It modifies the global MCP configuration file (`~/.mcp.json`) and stores a sensitive API token in a local config file. More importantly, multiple scripts (including `quote.sh`, `kline.sh`, and `search.sh`) are vulnerable to JSON injection because they insert unsanitized user arguments directly into JSON payloads sent to the backend at `ai.szfiu.com`. While these behaviors align with the stated purpose and lack clear evidence of intentional malice, the lack of input sanitization and modification of global system configs represent significant security risks.

能力评估

✓ Purpose & Capability

Name/description, required env var (FIU_MCP_TOKEN), declared binaries (curl, jq, date, bash), and the scripts all consistently target FIU MCP endpoints (ai.szfiu.com) and implement market queries and simulated/real trades. The requested token is proportional and expected for this purpose.

ℹ Instruction Scope

Runtime instructions and scripts do more than just network calls: they create a ~/.fiu-market/config file and create/overwrite ~/.mcp.json (with a backup). That behaviour is coherent with the stated goal (integrating with MCP), but it modifies a shared configuration file used by other MCP-enabled tools — you should be aware it will change files in your home directory and may affect other tools.

✓ Install Mechanism

There is no remote download/install URL; the repository includes shell scripts (install.sh, scripts/*.sh) and the SKILL.md expects the agent to run local bash commands. No archives or external code-hosting downloads are fetched during install. All external network calls go to ai.szfiu.com, which matches the skill's claimed service.

✓ Credentials

Only FIU_MCP_TOKEN is required (declared as sensitive). No unrelated credentials or broad environment access are requested. The scripts read/write only user-local config files and the FIU token, which is proportionate to the functionality.

ℹ Persistence & Privilege

The skill is not always-enabled and does not request elevated platform privileges, but it writes persistent config files (~/.fiu-market/config and ~/.mcp.json). That persistent change to ~/.mcp.json could affect other MCP integrations; the scripts create a backup but will overwrite by default. Also real trading requires interactive confirmation in scripts (read -p), which may behave unexpectedly if run non-interactively by an agent.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install fiu-market-assistant
安装完成后，直接呼叫该 Skill 的名称或使用 /fiu-market-assistant 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.13

Version 1.0.13 - Major update: Added quick setup, argument-based dispatching, and extensive documentation in English. - Introduced new CLI scripts and install methods for easier deployment (install.sh, scripts/cli.sh, scripts/mcp_router.sh). - Added detailed user guidance for market data/trading commands across HK, US, and CN markets. - Included Chinese and English interface documentation and usage references. - Skill metadata and security instructions updated for token and config management.

v1.0.12

**Major simplification and refactor of skill documentation and structure.** - Removed 8 files including all CLI/scripts, installation, and tool interface docs (e.g., SKILL_CN.md, install.sh, scripts/cli.sh, skill.json). - Completely rewrote skill documentation with a concise, user-facing SKILL.md in Chinese, clarifying supported commands, config, features, and usage. - Shifted focus to end-user skill invocation and core function overview; system/API/internal setup details are no longer included. - Explicitly lists major error types and handling for clarity. - Old technical, CLI, and tool dispatch instructions are now omitted, leaving only key usage and configuration guidance.

v1.0.11

- Updated all service URLs from https://mcp.szfiu.com/ to https://ai.szfiu.com/ in the MCP Servers Reference and token retrieval link. - No code or feature changes; documentation and endpoint references only. - No breaking changes; all commands and usage remain the same.

v1.0.10

No user-facing changes in this release. - No file or documentation changes detected. - All features, commands, and configuration remain unchanged.

v1.0.9

Version 1.0.9 - Added a detailed feature support table for HK, US, and CN markets, clarifying which features are available for each region. - No other user-facing changes detected.

v1.0.8

Version 1.0.8 of fiu-market-assistant - No file changes detected in this release. - Documentation and usage remain unchanged. - All features and configurations are consistent with the previous version.

v1.0.7

- Added `metadata` section to specify required environment variable (FIU_MCP_TOKEN) and binary dependencies (curl, jq, date, bash). - Declared FIU_MCP_TOKEN as the primary credential needed for operation. - No feature or behavior changes to commands or usage; documentation updated only.

v1.0.6

**v1.0.6 Summary: Adds a new CLI script and updates SKILL.md for improved usability.** - Added `scripts/cli.sh` for additional command-line interaction. - Major SKILL.md rewrite: streamlined quick setup, clear CLI commands, and usage instructions. - Skill is now directly invocable and exposes Bash/Read/Write tools. - Simplified onboarding, discovery, and trading workflows. - Updated documentation to reflect one-command setup and quick command examples.

v1.0.5

- Clarified "Discovery First" workflow at the top for improved usability: instructs users to find available tool names using the `--list-tools` command before making API calls. - Added step-by-step usage guidance on discovering and then calling the correct tools for each market, to reduce confusion from differing tool names. - Kept all technical content, configuration, and capabilities unchanged. - No code or feature changes in this version; documentation is more concise and user-guided.

v1.0.4

- Initial release of FIU MCP Market Data and Trading Assistant skill. - Supports real-time quotes, K-line data, capital flow, and trading operations for HK, US, and CN stock markets. - Includes a universal MCP Router script for accessing all APIs. - Provides 13+ market data APIs and 7+ trading operation APIs. - Requires FIU_MCP_TOKEN environment variable for authentication. - Emphasizes simulate trading by default, with safety controls for real trading.

v1.0.3

- Added install.sh script for easier installation and setup. - Added skill.json metadata file for improved deployment and discovery. - No user-facing changes to skill features or documentation content.

v1.0.2

v1.0.2 — No user-facing changes. - No file changes detected compared to previous version. - No modifications to features, configuration, or documentation.

v1.0.1

**Summary:** Initializes universal MCP Router and improves documentation for broader usage and flexibility. - Added a universal MCP Router script (`scripts/mcp_router.sh`) for calling all FIU MCP Server APIs. - Provided full documentation in both English and Chinese, including detailed API references (`docs/mcp-interfaces_CN.md`, `docs/mcp-interfaces_EN.md`, and `docs/MCP_TOOLS.md`). - Updated SKILL.md: enhanced configuration, feature explanations, usage instructions, and clarified required tools. - Expanded examples and usage scenarios in both English and Chinese. - No breaking changes to core functionality; enhances access, guidance, and flexibility for all markets.

v1.0.0

Initial release of FIU MCP market-assistant skill: - Provides real-time market data and trading assistant for Hong Kong, US, and China A-shares. - Supports snapshot quotes, K-line data, capital flows, and multi-market trading operations (simulate by default). - Includes commands for trading (buy, sell, order management), market analysis, and sector queries. - Enables real-time subscriptions for push notifications on quotes, orders, and charts. - Requires MCP token setup for secure access and usage. - Detailed usage examples, configuration steps, and error handling included.

元数据

Slug fiu-market-assistant

版本 1.0.13

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 14

常见问题