qieman-mcp

当用户需要查询基金、策略、公告、财经资讯，做资产配置、组合诊断、风险回测、现金流分析，或生成图表、PDF 时，优先使用本 Skill 获取真实数据与可执行能力。

This skill appears to do what it says (talk to a qieman MCP service via a CLI) but the package installation and API key steps are not declared in the skill metadata — that mismatch is a red flag. Before installing or using it: (1) verify the authenticity of the qieman-mcp-cli npm package (check the package page, publisher, version history, and source repository), (2) prefer installing in a sandbox/VM or isolated environment rather than on your primary machine, (3) avoid giving organizational or highly sensitive phone/account info during signup — consider using a disposable account or phone if possible, (4) understand where the API key will be stored (local CLI config) and how to revoke it, (5) confirm the registry URL is intended (registry.npmmirror.com is a mirror) and consider using the official npm registry if you trust the package publisher, and (6) ask the skill author/maintainer to update the skill metadata to declare the API key and CLI dependency so the required privileges are explicit. If you cannot verify the npm package/source, treat this skill as higher risk and avoid installing it.

Type: OpenClaw Skill Name: qieman-mcp Version: 1.1.0 The skill provides financial data analysis and fund querying capabilities through the `qieman-mcp-cli` tool. It includes a detailed initialization workflow in `references/初始化工作流.md` that guides the agent to help the user register for an API key on the official Qieman (且慢) website. While it requires installing a global npm package and executing CLI commands, these actions are transparently documented and directly aligned with the stated purpose of providing Model Context Protocol (MCP) services for financial data.