← 返回 Skills 市场
238
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install qutedance-quotes
功能描述
提供 A股、港股、期货实时行情查询，股票/期货搜索及A股板块热门涨跌榜信息。
安全使用建议
This skill appears to do what it claims (fetch market quotes) but it recommends storing your API key inside the shipped config.json and points to an external service URL. Before installing: 1) Verify and trust the service host (https://quotedance.api.gapgap.cc) or host your own quotedance-service. 2) Do NOT store secrets in the repo config.json—use an environment variable (QUTEDANCE_API_KEY) or a secure secret store. 3) If you allow autonomous agent invocation, be cautious because the skill will send queries (and any provided API key) to that external endpoint. 4) Optionally review the script locally to confirm no extra endpoints or unexpected behavior, and consider removing or leaving the apiKey blank in config.json before adding the skill.
功能分析
Type: OpenClaw Skill
Name: qutedance-quotes
Version: 1.0.0
The skill facilitates financial market data retrieval from an external API (quotedance.api.gapgap.cc) and handles authentication via API keys. While the code in scripts/qutedance-quotes.js is functionally aligned with its stated purpose, it is classified as suspicious because it utilizes external network access to a non-standard domain and explicitly encourages the insecure practice of storing API keys in a plain-text configuration file (config.json). These behaviors, while plausibly necessary for the skill's operation, represent risky capabilities and security vulnerabilities in an untrusted bundle.
能力评估
Purpose & Capability
Name, description, SKILL.md and the JS implementation all align: the skill queries quotedance-service endpoints for quotes, plate/top info and search. It does not request unrelated credentials or binaries.
Instruction Scope
SKILL.md instructs the agent and users to call the listed quotedance endpoints and to run the included Node script; it does not ask the agent to read unrelated files. However the docs explicitly advise writing the API key directly into the skill's config.json (repo file), which expands the data surface and is insecure.
Install Mechanism
No install specification or download steps; this is an instruction+script skill with no external installers. The script runs normal HTTP calls and filesystem reads; nothing is written to disk by an installer.
Credentials
No required env vars are declared, but the code will read process.env.QUTEDANCE_API_KEY as a fallback and the SKILL.md encourages putting the API key in config.json. Storing secrets in a repository file is disproportionate and risky. The configured serviceUrl (https://quotedance.api.gapgap.cc) is an external endpoint — expected for this skill but you should verify you trust that host.
Persistence & Privilege
Skill does not request always:true, does not modify other skill or system configs, and runs only when invoked. Autonomous invocation is enabled by default (disable-model-invocation=false), which is platform-normal; combine that with the credential concerns if you allow autonomous runs.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install qutedance-quotes - 安装完成后，直接呼叫该 Skill 的名称或使用
/qutedance-quotes触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Qutedance Quotes v1.0.0
- Initial release with support for real-time quotes of A-shares, Hong Kong stocks, and futures.
- Provides A-share sector top gainers/losers and popular boards leaderboard.
- Enables fuzzy search for stocks, futures, and other symbols by name or code.
- Simple configuration and manual script usage instructions included.
- Outputs formatted Markdown tables/lists for easy in-chat viewing.
元数据
常见问题
qutedance-quotes 是什么？
提供 A股、港股、期货实时行情查询，股票/期货搜索及A股板块热门涨跌榜信息。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 238 次。
如何安装 qutedance-quotes？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install qutedance-quotes」即可一键安装，无需额外配置。
qutedance-quotes 是免费的吗？
是的，qutedance-quotes 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
qutedance-quotes 支持哪些平台？
qutedance-quotes 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 qutedance-quotes？
由 yoocky（@yoocky）开发并维护，当前版本 v1.0.0。
推荐 Skills