Tickflow Realtime

使用 TickFlow 数据中心查询实时行情和日K数据。适用于用户想查单个或多个标的的最新价格、涨跌幅、成交量、交易时段，或查询单标的/多标的的日K、最近N根K线、复权K线时。

This package appears to be a straightforward TickFlow HTTP client, but the registry entry is missing the fact that it requires TICKFLOW_API_KEY and the source/homepage is unknown. Before installing or supplying an API key: 1) Verify the skill's origin (repo/owner) and prefer published code from a known source; 2) Inspect the included scripts yourself (they're short and readable) to confirm no hidden endpoints; 3) Provide a least-privilege TickFlow API key (or a scoped/test key) rather than a high-privilege/production key; 4) If you must run it, consider running in a restricted/sandboxed environment and monitor network traffic; 5) Ask the publisher to update registry metadata to declare TICKFLOW_API_KEY as a required credential and to add a homepage/source link — the current metadata omission is the main inconsistency.

Type: OpenClaw Skill Name: tickflow-realtime Version: 0.1.0 The skill bundle is a legitimate tool for fetching real-time stock quotes and K-line data from the TickFlow API (api.tickflow.org). The implementation in scripts/tickflow_common.py and the query scripts follows standard practices, using environment variables for authentication and providing clear instructions in SKILL.md to prevent API key leakage. No evidence of malicious behavior, data exfiltration, or prompt injection was found.