A Stock

A股金融数据查询与分析助手。当用户询问任何与A股相关的问题时，使用此技能——包括：查询个股信息、实时行情、分时走势、龙虎榜、行业板块、盘口异动、市场总貌等。触发词包括但不限于：股票、A股、沪市、深市、行情、涨停、跌停、板块、龙虎榜、盘口异动、个股、股价、总市值、证券，或任何带有6位股票代码的查询（如 600519...

What to check before installing/using: 1) Confirm the skill source (review the GitHub repo at the provided homepage) to ensure it matches the package you installed. 2) Verify the metadata mismatch: SKILL.md requires ASTOCK_API_KEY and Node/npx, but registry metadata omitted these — treat that as a packaging error and confirm requirements. 3) Avoid running the script from directories containing other .env files with unrelated secrets; prefer setting ASTOCK_API_KEY as an explicit environment variable or create a dedicated project directory with a minimal .env. 4) Inspect scripts/api-client.ts yourself (it is short): it only reads ASTOCK_API_KEY and calls https://api.aipmedia.cn; if you trust that service, the behavior is consistent. 5) If you have concerns about leaking the API key, isolate the process (container/VM) or review network egress controls; otherwise the key will be sent to api.aipmedia.cn as intended. 6) If you want higher assurance, ask the publisher to fix the package metadata to declare required env vars and runtime binaries. If any of these points are unclear or you want help checking the repo contents or running the script in a safe environment, I can assist.

Type: OpenClaw Skill Name: stock-skill-2 Version: 0.1.1 The skill is a legitimate A-share stock market data assistant that queries financial information from api.aipmedia.cn. The provided TypeScript client (scripts/api-client.ts) correctly handles API authentication by reading a specific ASTOCK_API_KEY from environment variables or a local .env file, and the instructions in SKILL.md explicitly advise against exposing this key in chat logs. The code and instructions are well-structured, lack obfuscation, and do not exhibit any signs of data exfiltration or malicious execution.