← 返回 Skills 市场

Kuvera Portfolio & Market Data

Name: Kuvera Portfolio & Market Data
Author: ankitsul

作者 Ankit Sultania · GitHub ↗ · v1.0.0

cross-platform ✓ 安全检测通过

344

总下载

当前安装

版本数

在 OpenClaw 中安装

/install kuvera

功能描述

Kuvera portfolio & market data CLI. Query mutual fund data, gold prices, USD/INR rates, fund category returns, and user portfolio info from Kuvera. Use when...

使用说明 (SKILL.md)

Kuvera Portfolio & Market Data CLI

Get Indian market data, mutual fund info, gold prices, and portfolio data from Kuvera.

When to Use

✅ USE this skill when:

"What's the gold price?"
"How's the market doing?"
"Top mutual funds"
"Dollar rate / USD INR"
"Show me mutual fund category returns"
"Tell me about fund XYZ"
"Show my Kuvera portfolio"
"How are my investments doing?"
"Show my recent transactions"
"What are my active SIPs?"
"What's my P&L / returns?"

Commands

Market Overview (gold + USD + MF categories)

kuvera-cli market

Gold Price

kuvera-cli gold

USD/INR Exchange Rate

kuvera-cli usd

Mutual Fund Category Returns

kuvera-cli categories

Mutual Fund Details (by code)

# Example: look up a specific fund
kuvera-cli fund LFAG-GR

Top Mutual Funds

# Top bought funds
kuvera-cli top bought

# Top sold funds
kuvera-cli top sold

# Most watched funds
kuvera-cli top watched

User Profile (requires login)

kuvera-cli user

Investment Portfolio with P&L (requires login)

kuvera-cli portfolio

Recent Transactions (requires login)

# Show last 20 transactions (default)
kuvera-cli transactions

# Show last N transactions
kuvera-cli transactions 10

Active SIPs (requires login)

kuvera-cli sips

⛔ SAFETY — READ-ONLY

This skill is strictly read-only. NEVER attempt to:

Buy, sell, redeem, or switch any mutual fund
Place any order or modify any transaction
Change any user settings or portfolio configuration
Call any Kuvera API endpoint that modifies data

The CLI enforces this at the code level — all non-GET requests (except login) are blocked.

Notes

All market data commands work without login.
kuvera-cli user, portfolio, transactions, and sips require prior login via kuvera-cli login \x3Cemail> \x3Cpassword>.
This is read-only. No buy/sell/trade operations are supported.

安全使用建议

This skill appears to be what it claims: a read-only Kuvera CLI. Before installing, consider: 1) Login requires you to pass your Kuvera email/password to the CLI — avoid putting credentials in shell history (use an interactive prompt or a secure mechanism) because commands like kuvera-cli login <email> <password> may be recorded. 2) The CLI stores a JWT/token at ~/.openclaw/credentials/kuvera/token.json — ensure that file is protected by filesystem permissions and that your machine is trusted. 3) The code enforces a whitelist allowing only GET requests plus the authenticate POST; you may review kuvera-cli.js yourself to confirm no unexpected endpoints are present before running. 4) Because there's no automatic installer, ensure the kuvera-cli binary you place on PATH is the expected script (trust its source). If you need stronger guarantees, test the CLI in an isolated environment or inspect the token file handling and network endpoints further.

功能分析

Type: OpenClaw Skill Name: kuvera Version: 1.0.0 The skill bundle is classified as benign. The `kuvera-cli.js` script explicitly enforces a 'read-only' policy by blocking all non-GET HTTP requests, except for the `/api/v5/users/authenticate.json` endpoint, which is necessary for login. This strong safety mechanism directly aligns with the '⛔ SAFETY — READ-ONLY' instructions in `SKILL.md` and `README.md`. Credentials are stored in the designated `~/.openclaw/credentials/kuvera/token.json` path, and all network communication is directed to the legitimate `api.kuvera.in` domain. There is no evidence of data exfiltration, unauthorized command execution, persistence mechanisms, or prompt injection attempts designed to bypass safety instructions or perform harmful actions.

能力评估

✓ Purpose & Capability

Name/description ask for market & portfolio queries. The skill requires the kuvera-cli binary and the included kuvera-cli.js implements those read-only queries against api.kuvera.in — the requested pieces align with the stated purpose.

ℹ Instruction Scope

SKILL.md instructs the agent to run kuvera-cli commands (market, gold, usd, categories, fund, user, portfolio, transactions, sips). Login requires kuvera-cli login <email> <password>. The runtime instructions and CLI code stick to read-only GET endpoints, but note that login transmits user credentials to Kuvera and the CLI stores a token file (~/.openclaw/credentials/kuvera/token.json) — a normal side-effect but material for user privacy and shell-history consideration.

✓ Install Mechanism

No automated install script or remote downloads. The README instructs copying the skill folder into the local OpenClaw skills directory. That is low risk compared to remote installers; installing the kuvera-cli binary is required but not automated by the skill.

✓ Credentials

The skill requests no environment variables or unrelated credentials. It uses process.env.HOME to determine the user's home for token storage — appropriate and proportionate for storing a user auth token.

✓ Persistence & Privilege

always is false and the skill does not request system-wide privileges. It writes its own token to ~/.openclaw/credentials/kuvera/token.json (expected). It does not modify other skills or global agent settings.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install kuvera
安装完成后，直接呼叫该 Skill 的名称或使用 /kuvera 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

Initial release: portfolio holdings with P&L, transactions, SIPs, gold prices, USD/INR, mutual fund categories & details

元数据

Slug kuvera

版本 1.0.0

许可证 —

累计安装 2

当前安装数 2

历史版本数 1

常见问题