实时财经数据

实时财经数据查询技能 - 支持A股、港股、美股、黄金、原油、VIX、美债等

This skill appears to do what it says: fetch realtime quotes from Sina (A/H) and Yahoo (US/commodities/FX). Before installing, consider: 1) The script makes network requests to public endpoints (Sina and Yahoo); allow network only if you trust those services. 2) The Sina call uses HTTP (not HTTPS), so responses could be tampered with on a hostile network — avoid using on untrusted networks or prefer HTTPS if you modify the script. 3) yfinance is installed via pip — verify you trust the package source and consider installing in a virtualenv. 4) The skill source/homepage is unknown; if you need stronger assurance, review the full realtime_finance.py file yourself (or run it in a sandbox) to confirm there are no unexpected network endpoints or logging/exfiltration steps. If you are satisfied, the requested permissions and behavior are proportionate for a finance-quote tool.

Type: OpenClaw Skill Name: realtime-finance Version: 1.0.0 The 'realtime-finance' skill is a legitimate tool for fetching financial market data from Sina Finance and Yahoo Finance. The Python script (realtime_finance.py) implements standard data retrieval logic using public APIs and the 'yfinance' library, with no evidence of data exfiltration, malicious execution, or prompt injection. All files, including the shell wrapper and markdown instructions, are well-aligned with the stated purpose of providing stock and commodity price updates.