← 返回 Skills 市场
snazar-faberlens

Stock Price Checker Hardened

作者 Faberlens · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ✓ 安全检测通过
82
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install stock-price-checker-hardened
功能描述
Check stock prices using yfinance library. No API key required.
安全使用建议
This skill is internally consistent and appears safe for its stated purpose, but check these small details before installing: (1) Install yfinance via pip (pip install yfinance) — it is a Python package, not a standalone binary. (2) stock-price.sh uses a hard-coded absolute path (/home/clawdbot/...), so either run the documented 'python3 stock-price.py SYMBOL' from the skill directory or update the script path to match your installation. (3) Understand that yfinance performs network requests to Yahoo Finance to fetch live data (expected behavior). (4) Follow the included SAFETY guardrails: do not pipe or send the output to remote endpoints or other networked commands unless you intentionally and safely handle that data. If you need higher assurance, verify the package source (yfinance from PyPI) and inspect or run the Python script in a sandboxed environment first.
功能分析
Type: OpenClaw Skill Name: stock-price-checker-hardened Version: 1.0.0 The skill is a legitimate stock price utility using the 'yfinance' library. It includes extensive defensive documentation in SKILL.md and SAFETY.md (attributed to Faberlens) designed to harden the AI agent against social engineering, PII leakage, and command injection. The core logic in stock-price.py is simple, lacks any suspicious network or file system activity, and adheres strictly to its stated purpose.
能力标签
requires-sensitive-credentials
能力评估
Purpose & Capability
Name/description, SKILL.md, and the included Python script all align: the tool fetches stock data using yfinance and prints formatted output. Required items are minimal (python3 and the yfinance package). Minor mismatch: 'yfinance' is listed under "required binaries" even though it is a Python package (pip installable) rather than a standalone binary.
Instruction Scope
SKILL.md strictly documents running 'python3 stock-price.py SYMBOL' and the script only uses yfinance to contact Yahoo Finance and prints local output. The provided SAFETY.md guardrails further restrict network exfiltration and direct inline yfinance usage. The only scope oddity is stock-price.sh which contains a hard-coded absolute path (/home/clawdbot/...), which differs from the SKILL.md working-directory examples — this is an implementation quirk but not an evidence of malicious behavior.
Install Mechanism
No install spec is provided (instruction-only install), so nothing is downloaded or written by the skill itself. This is the lowest-risk install pattern. Users will need to ensure yfinance is installed themselves (pip).
Credentials
The skill requests no environment variables or credentials, which is appropriate for its stated purpose. The script does not attempt to read other system configs or secrets.
Persistence & Privilege
Skill is not marked always:true and does not request elevated privileges or modify other skills or system-wide settings. Autonomous invocation is allowed by default but not unusual here and does not combine with other red flags.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install stock-price-checker-hardened
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /stock-price-checker-hardened 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release of stock-price-checker-hardened: - Allows users to check live stock prices using the yfinance library with no API key required. - Supports simple CLI usage: run `python3 stock-price.py SYMBOL` for any major stock or ETF. - Outputs comprehensive stock data, including current price, price change, market cap, volume, and 52-week range. - Includes clear error handling for invalid symbols or unavailable data. - Provides strict security guardrails to prevent privacy and data leakage risks.
元数据
Slug stock-price-checker-hardened
版本 1.0.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Stock Price Checker Hardened 是什么?

Check stock prices using yfinance library. No API key required. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 82 次。

如何安装 Stock Price Checker Hardened?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install stock-price-checker-hardened」即可一键安装,无需额外配置。

Stock Price Checker Hardened 是免费的吗?

是的,Stock Price Checker Hardened 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Stock Price Checker Hardened 支持哪些平台?

Stock Price Checker Hardened 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Stock Price Checker Hardened?

由 Faberlens(@snazar-faberlens)开发并维护,当前版本 v1.0.0。

💬 留言讨论