tqsdk-query

天勤量化 - 期货实时行情与历史数据接口，提供国内期货、期权的实时报价、K线序列与历史数据查询。

This skill appears to do what it says (fetch TqSdk market and kline data) and legitimately needs your TQ username/password. Before installing: (1) be aware you must set TQ_USERNAME and TQ_PASSWORD as environment variables — the registry metadata failing to list them is an oversight; (2) avoid putting high-privilege or primary account credentials in the skill without understanding risk — prefer a dedicated account if possible; (3) note the package imports a local module (.tqsdk_client) that is not present in the manifest — this may cause runtime errors; verify the package will install tqsdk and pandas in a controlled environment; (4) review network policy if you require that the skill only communicate with approved endpoints (tqsdk will contact ShinnyTech servers); and (5) if you are uncomfortable providing credentials, do not install or run the skill until these issues are resolved or run it in an isolated/sandboxed environment.

Type: OpenClaw Skill Name: tqsdk-query Version: 1.0.0 The skill is a legitimate integration for the Tianqin Quant SDK (TQSDK), providing access to Chinese futures market data. It follows security best practices by requiring credentials (TQ_USERNAME, TQ_PASSWORD) to be provided via environment variables rather than as command parameters. The implementation in __init__.py uses the official tqsdk library to fetch quotes and K-line data as described, with no evidence of data exfiltration, unauthorized execution, or malicious instructions.