← 返回 Skills 市场
773
总下载
2
收藏
0
当前安装
6
版本数
在 OpenClaw 中安装
/install massive-skill
功能描述
Access Massive(Polygon) stock, crypto, forex, options, indices, futures, market data, and news APIs via CLI.
安全使用建议
This skill appears coherent for calling Massive/Polygon APIs via the 'massive' CLI, but it invokes code via 'npx' which downloads/executes the 'massive' package from npm at run time. Before using: 1) Confirm the npm package name ('massive') and publisher are legitimate (check npmjs.com and the package's repository), since the registry metadata lists no source/homepage. 2) Review the package source (or pin a specific version) rather than blindly running npx --yes. 3) Limit the MASSIVE_API_KEY scope and avoid placing it in broadly shared environments; rotate it if you suspect misuse. 4) If possible, prefer installing a vetted release or vendor-provided client rather than repeated npx fetches to reduce the risk of supply-chain changes.
功能分析
Type: OpenClaw Skill
Name: massive-skill
Version: 1.0.5
The skill is classified as suspicious due to its reliance on `npx --yes massive <command>` for execution, as documented in `SKILL.md` and all `references/*.md` files. While this is a common method for running Node.js CLI tools, it introduces a supply chain risk by downloading and executing code from the npm registry without explicit auditing of the `massive` package itself. This constitutes a risky capability (shell execution of external code) without clear malicious intent from the skill's documentation, aligning with the definition of 'suspicious' rather than 'benign' or 'malicious'.
能力评估
Purpose & Capability
Name/description, required binary (npx), and required env var (MASSIVE_API_KEY) align with a CLI wrapper for Massive/Polygon market data. Minor note: registry metadata lists source/homepage as unknown while SKILL.md references massive.com — verify the upstream package and publisher.
Instruction Scope
Runtime instructions are limited to invoking 'npx --yes massive <command>' and reference only API-related commands. The SKILL.md does not instruct reading unrelated files or accessing other credentials.
Install Mechanism
This is an instruction-only skill that relies on npx at runtime. npx will fetch and execute code from the npm registry on demand — expected for a CLI but a moderate operational risk if the npm package or its maintainer is untrusted.
Credentials
Only a single credential (MASSIVE_API_KEY) is required and declared as primary. No unrelated secrets, files, or config paths are requested.
Persistence & Privilege
Skill does not request persistent/always-on privileges and uses default autonomous invocation settings. It does not modify other skills or system configs.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install massive-skill - 安装完成后，直接呼叫该 Skill 的名称或使用
/massive-skill触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.5
- Updated CLI usage instructions to require the --yes flag with npx.
- No changes to command functionality; documentation improvements only.
v1.0.4
- Updated skill name from "polygon-api" to "massive-api" to reflect current branding.
- Changed provider references from "Polygon/Massive" to "Massive(Polygon)" throughout documentation.
- Updated required environment variable from POLY_API_KEY to MASSIVE_API_KEY.
- Adjusted metadata keys to match new environment variable and provider naming.
v1.0.3
- Switched CLI usage from Bun to npx, updating all usage examples.
- Updated required CLI dependency in metadata from "bun" to "npx".
- Removed the CLI entrypoint file cli.js.
v1.0.2
- Added metadata to SKILL.md specifying required binaries and environment variables for use.
- Declared POLY_API_KEY as the primary required environment variable.
v1.0.1
- CLI usage instructions updated for a simpler workflow; reference to JS client removed.
- Build and environment setup steps taken out of documentation.
- Description streamlined to mention CLI access only.
- No changes to commands or API coverage.
v1.0.0
- Initial release of the polygon-api skill for accessing Polygon/Massive market data.
- Provides a CLI tool and JS client for retrieving stocks, crypto, forex, options, indices, futures, market data, and news.
- Includes setup instructions for API key configuration and environment setup.
- Supports detailed command references for each financial data category.
- Outputs all command results as JSON via the CLI.
元数据
常见问题
Massive(Polygon) 是什么？
Access Massive(Polygon) stock, crypto, forex, options, indices, futures, market data, and news APIs via CLI. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 773 次。
如何安装 Massive(Polygon)？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install massive-skill」即可一键安装，无需额外配置。
Massive(Polygon) 是免费的吗？
是的，Massive(Polygon) 完全免费（开源免费），可自由下载、安装和使用。
Massive(Polygon) 支持哪些平台？
Massive(Polygon) 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Massive(Polygon)？
由 Bruce Shi（@bruce-shi）开发并维护，当前版本 v1.0.5。
推荐 Skills