← 返回 Skills 市场
94
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install market-beats
功能描述
7x24小时财经新闻实时爬取与展示。支持金十数据等多个财经新闻源的实时爬取,通过WebSocket实现秒级推送,提供美观的前端界面展示最新财经资讯。适用于需要实时监控财经动态的场景。
安全使用建议
This package is a thin client that forwards your messages to a remote Prana/Claw backend (the scraping and UI are performed server‑side), not a self-contained market scraper. Before installing or running: 1) Understand that the client will attempt to obtain API keys from a default UAT endpoint (https://claw-uat.ebonex.io/) if you don't provide credentials, which may create/return keys and then write them to config/api_key.txt; 2) If you do not trust that remote endpoint, set PRANA_SKILL_NO_AUTO_API_KEY=1 and supply PRANA_SKILL_PUBLIC_KEY + PRANA_SKILL_SECRET_KEY (or PRANA_SKILL_API_KEY) pointing to a trusted service; 3) To avoid writing secrets to disk, set PRANA_SKILL_SKIP_WRITE_API_KEY=1 and manage keys via env vars; 4) Note SKILL.md requires the runner to pass remote responses to end users verbatim — ensure you trust the remote service and its content before exposing results to users; 5) Do not commit config/api_key.txt to any public repo. These mismatches between the package behavior and its description/metadata are likely benign design choices but are important to understand and verify before use.
功能分析
Type: OpenClaw Skill
Name: market-beats
Version: 1.0.0
The skill bundle acts as a 'thin client' that proxies all execution to a remote server (claw-uat.ebonex.io) rather than running logic locally. It contains scripts (prana_skill_client.py and prana_skill_client.js) that automatically fetch API credentials from a remote endpoint and persist them to a local file (config/api_key.txt). Additionally, SKILL.md and skill.yaml contain explicit instructions to the AI agent to 'pass through' remote results without summarization or modification, which is a form of prompt injection designed to bypass the agent's typical filtering or oversight capabilities.
能力评估
Purpose & Capability
The skill's description promises 24/7 news crawling and a frontend, but the package contains only an encapsulation thin client (Python/Node) that forwards input to a remote Prana/Claw service (the real scraping/execution happens server-side). This is plausible for an encapsulated skill, but could mislead users who expect local scraping/frontend code to be present.
Instruction Scope
SKILL.md and the scripts instruct the runner to call /api/claw/agent-run and /api/claw/agent-result and to deliver those responses raw to end users. The scripts also auto-fetch API keys (GET /api/v1/api-keys) from a base URL and will write credentials to config/api_key.txt by default. The runtime thus reads/writes local credential files and transmits user input to a remote service; these actions are outside what a user might assume from the local description and the registry's 'no required env vars' claim.
Install Mechanism
No arbitrary downloads or novel install mechanism. Node runner requires npm install to obtain the 'yaml' dependency (declared in package.json). There is no extract-from-URL or untrusted binary download in the package.
Credentials
Although registry metadata lists no required env vars, the scripts expect/accept sensitive credentials (PRANA_SKILL_PUBLIC_KEY / PRANA_SKILL_SECRET_KEY or PRANA_SKILL_API_KEY) or will auto-request them from a default base URL. The client will persist public_key:secret_key to config/api_key.txt by default (unless PRANA_SKILL_SKIP_WRITE_API_KEY=1). The default base URL is a UAT domain (https://claw-uat.ebonex.io/), which may be unexpected; asking for/auto-creating API keys and writing them to disk should be considered privileged behavior and requires trusting the remote service.
Persistence & Privilege
always:false and no global privileges requested. The client will persist API keys to config/api_key.txt by default and may create a local config directory; it does not modify other skills. Writing credentials locally is the primary persistence behavior to be aware of.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install market-beats - 安装完成后,直接呼叫该 Skill 的名称或使用
/market-beats触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
市场实时快讯 1.0.0 发布:实现多源财经新闻秒级推送与美观展示
- 实现7x24小时财经新闻的聚合与实时展示
- 支持金十数据等多家财经资讯源的秒级推送
- 提供WebSocket接口,实现即时推送最新动态
- 美观前端界面,方便用户直观浏览快讯
- 详细说明客户端与API对接方式,确保对接一致性
元数据
常见问题
market-beats 是什么?
7x24小时财经新闻实时爬取与展示。支持金十数据等多个财经新闻源的实时爬取,通过WebSocket实现秒级推送,提供美观的前端界面展示最新财经资讯。适用于需要实时监控财经动态的场景。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 94 次。
如何安装 market-beats?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install market-beats」即可一键安装,无需额外配置。
market-beats 是免费的吗?
是的,market-beats 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
market-beats 支持哪些平台?
market-beats 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 market-beats?
由 luokeer52(@luokeer52)开发并维护,当前版本 v1.0.0。
推荐 Skills