← 返回 Skills 市场
282
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install quotedance-market
功能描述
提供全球市场数据和专业投研情报，自动生成结构化日报和周末市场分析报告。
安全使用建议
This skill appears to do what it says (fetch market quotes and news) but exercise caution: 1) Inspect the full scripts before running — the file will make outbound HTTP requests and may call the local curl binary. 2) Verify and trust the configured serviceUrl (quotedance.api.gapgap.cc) — it will receive requests as a fallback. 3) Note the likely typo in the env var name (QUTEDANCE_API_KEY); if you set an API key, confirm the variable name used by the script. 4) Run the skill first in a restricted/sandboxed environment or with network blocked to observe behavior, and check the memory/ directory for any stored snapshots. 5) If you plan to provide an API key or allow proxying, prefer using minimal, documented endpoints and only supply credentials you trust.
功能分析
Type: OpenClaw Skill
Name: quotedance-market
Version: 1.0.0
The skill provides market research capabilities by aggregating data from Yahoo Finance, RSS feeds, and a third-party API (quotedance.api.gapgap.cc). It is classified as suspicious because it utilizes risky capabilities, specifically the use of `execFileSync` to execute system-level `curl` commands as a network fallback in `market-scan.js`. While these behaviors are aligned with the stated purpose of fetching financial data, the combination of binary execution, local file system persistence in the `memory/` directory, and outbound network requests to an external service represents a significant attack surface.
能力评估
Purpose & Capability
Name/description (market reports) align with the code: the script fetches quotes, news, and generates reports. However the configured serviceUrl (https://quotedance.api.gapgap.cc) is an opaque third‑party domain not documented in the SKILL metadata/homepage; the skill will send symbol lists/requests to that endpoint as a fallback — verify you trust that host.
Instruction Scope
SKILL.md instructs the agent and user to run the included Node script and documents data sources. The script only reads its own config and writes snapshots to its memory/ directory; it does perform broad network requests to many public news and quote endpoints (Yahoo, Bloomberg feeds, Reuters, Stooq, quotedance-service). No instructions ask it to read unrelated system files or secrets.
Install Mechanism
There is no install spec (instruction-only installer), so nothing is fetched at install time. The runtime script can exec a local curl binary as a fallback (execFileSync('curl')), which will run system binaries when active — this is expected for network fallback but increases runtime risk if you run it on a host you care about.
Credentials
The skill declares no required env vars, yet the script reads standard proxy envs (HTTP(S)_PROXY / ALL_PROXY) and an API key env var spelled process.env.QUTEDANCE_API_KEY (note the apparent misspelling 'QUTEDANCE' vs 'QUOTEDANCE'). The script will send requests (including symbol lists) to quotedance.api.gapgap.cc; although an API key is optional, sending data to that unknown host without explicit user consent is a privacy/identification risk.
Persistence & Privilege
always:false and no special privileges. The script writes its own memory snapshots and cache under skills/quotedance-market/memory. It does not request system-wide config changes or modify other skills. Autonomous agent invocation is allowed by platform defaults (normal).
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install quotedance-market - 安装完成后，直接呼叫该 Skill 的名称或使用
/quotedance-market触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
quotedance-market 1.0.0 - 专业全球市场投研情报官上线：
- 支持整合美股、A股、期货主流市场行情，实时获取多数据源（Yahoo Finance, quotedance-service）。
- 日报/周报自动切换输出，涵盖市场数据、主题、机会与风险提示。
- 资讯聚合自 Bloomberg、Reuters、华尔街见闻等优质源，按优先级获取。
- 配置灵活（行情关注列表、资讯数量、代理网络、自选股等）。
- 专业可读的市场报告结构，支持表格与 Emoji、风险分级、节点标记等增强展示。
- 提供命令行脚本与智能触发词，易于集成与自动化运行。
元数据
常见问题
quotedance-market 是什么？
提供全球市场数据和专业投研情报，自动生成结构化日报和周末市场分析报告。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 282 次。
如何安装 quotedance-market？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install quotedance-market」即可一键安装，无需额外配置。
quotedance-market 是免费的吗？
是的，quotedance-market 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
quotedance-market 支持哪些平台？
quotedance-market 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 quotedance-market？
由 yoocky（@yoocky）开发并维护，当前版本 v1.0.0。
推荐 Skills