Tecent Finance 1.0.0

Get stock prices, quotes, and compare stocks using Tencent Finance API. No API key required. Supports US stocks, China A-Shares, Hong Kong stocks. Optimized for use in mainland China.

This SKILL.md claims a 'tfin' CLI but the package contains no code or executable. Do not run the suggested chmod/ln commands or download/install an executable unless you can verify its source. Recommended steps before installing or using this skill: - Ask the publisher for the full source code or the tfin script; do not execute binaries from unknown sources. - If they provide a script, review its contents (or run it in a sandbox) to verify it only makes HTTP calls to Tencent Finance endpoints and does not exfiltrate data or execute other system commands. - Avoid symlinking into /usr/local/bin or running installs as root until you trust the artifact; prefer running the tool from a confined environment (virtualenv, container, or non-privileged user). - Note the metadata inconsistencies (ownerId and slug/name variations and spelling errors). These could be benign typos but warrant asking the author to clarify provenance. If you can't get a verifiable script/source, treat this skill as untrusted and choose a well-known alternative (e.g., a published PyPI package or a verified GitHub repo) instead.

Type: OpenClaw Skill Name: tecent-finance-1-0-0 Version: 1.0.0 The skill bundle's `_meta.json` and `SKILL.md` files describe a legitimate command-line interface for fetching stock data from Tencent Finance API. The `SKILL.md` provides standard installation instructions (`chmod`, `ln -sf`, `pip3 install requests rich`) and usage examples. There is no evidence of prompt injection attempting to subvert the agent's behavior for malicious purposes, nor any indication of data exfiltration, unauthorized execution, or persistence mechanisms within the provided content. The described functionality is aligned with the stated purpose.