← 返回 Skills 市场
xhcj-finance
作者
jindongyi011039
· GitHub ↗
· v1.0.8
· MIT-0
374
总下载
1
收藏
1
当前安装
9
版本数
在 OpenClaw 中安装
/install xhcj-finance
功能描述
一个用于查询新华财经行情及资讯的工具
安全使用建议
This package appears to be a straightforward CLI for querying a Xinhua Finance API. Before installing: (1) verify you trust the remote API host (https://xhcj-h5-zg.cnfin.com/); the CLI sends your API credential (after taking an MD5 hash) to that host. (2) Note there is no platform install automation — you must run npm install and npm link locally, which will install third-party npm packages (axios, commander). (3) Prefer using a dedicated API key for this tool (do not reuse high-privilege secrets). (4) If you are concerned about the server expecting the unhashed key, review or test the behavior locally first because the tool hashes the supplied key with MD5 before sending it. Overall the components are coherent, but only install/use it if you trust the remote service and are comfortable running npm install/npm link on your machine.
功能分析
Type: OpenClaw Skill
Name: xhcj-finance
Version: 1.0.8
The xhcj-finance skill is a legitimate CLI tool for querying Xinhua Finance market data and news. The code in index.js follows its stated purpose, implementing basic security measures such as masking API keys in logs and hashing the key before using it as a Bearer token for requests to the official cnfin.com domain. No evidence of data exfiltration, malicious execution, or prompt injection was found.
能力评估
Purpose & Capability
Name/description match the implementation: a CLI that posts queries (market, kline, symbol, news) to a xhcj-related HTTPS API. The required inputs (an API key passed on the command line) are proportional to the stated purpose.
Instruction Scope
SKILL.md instructs normal CLI usage (npm install, npm link, run with --api-key and subcommands). The runtime instructions and the code only perform HTTP requests to the service endpoint and log results; they do not read arbitrary files, environment variables, or send data to unrelated endpoints.
Install Mechanism
There is no platform install spec (the package includes code and a package.json but the skill relies on the user running npm install/npm link). This is low-risk, but be aware dependencies (axios, commander) will be installed on the host when you run npm install.
Credentials
The skill does not request environment variables or other credentials beyond the API key the CLI asks for. No unrelated secret names or config paths are present.
Persistence & Privilege
always is false and the skill does not try to modify other skills or system-wide agent settings. The only persistent action suggested in docs is npm link (user-initiated), which is standard for CLI tools.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install xhcj-finance - 安装完成后，直接呼叫该 Skill 的名称或使用
/xhcj-finance触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.8
- Added structured frontmatter to SKILL.md, including name, description, version, and author fields
- No functional changes to the skill; documentation reformatted only
- Upgraded version number to 1.0.8
v1.0.7
- 改为通过命令行参数 --api-key 传递API密钥，不再使用环境变量 XHCJ_API_KEY
- 安装与配置部分删除了API密钥环境变量及相关说明
- 所有命令和示例增加 --api-key 参数，并更新了参数说明
- 强调每次执行命令时需要提供 --api-key
v1.0.6
- 更新了API密钥的配置说明，改为推荐使用 export 命令设置环境变量
- 移除了要求编辑 /etc/environment 文件及重启系统的旧步骤
- 其余功能、用法和注意事项保持不变
v1.0.5
- Updated API key configuration steps: now recommends editing /etc/environment for global environment variable setup.
- Removed previous platform-specific (Windows/Linux/macOS) API key setup instructions.
- All other usage instructions and features remain unchanged.
v1.0.4
xhcj-finance v1.0.4
- No file changes detected for this version.
- No new features, bug fixes, or documentation changes identified.
v1.0.3
xhcj-finance 1.0.3 expands feature documentation and usage guidance.
- 新增股票K线数据和股票代码查询说明，文档更详细
- 明确各命令参数说明及示例
- 安装和API密钥配置步骤更新，支持中英文注释
- 增加常见注意事项，提升用户操作安全
- 原功能保持不变，优化使用体验
v1.0.2
- Updated environment variable name from XHCJ-API-KEY to XHCJ_API_KEY throughout documentation.
- Adjusted setup instructions for environment variable to match the new naming convention.
- No functional or code changes in this version.
v1.0.1
- Added installation instructions for both Linux/macOS and Windows users.
- Clarified the need to set the XHCJ-API-KEY environment variable for authentication.
- Included package source information: repository URL, author, and license in the documentation.
- Updated the skill description with authorization requirements.
v1.0.0
xhcj-finance 1.0.0 - Initial Release
- Provides CLI commands to query Xinhua Finance market data in real-time and historically.
- Enables retrieval of latest financial news, supporting filtering by category and keyword.
- Requires XHCJ-API-KEY environment variable for authentication.
- Includes example usage for querying symbols and news through CLI.
元数据
常见问题
xhcj-finance 是什么？
一个用于查询新华财经行情及资讯的工具. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 374 次。
如何安装 xhcj-finance？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install xhcj-finance」即可一键安装，无需额外配置。
xhcj-finance 是免费的吗？
是的，xhcj-finance 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
xhcj-finance 支持哪些平台？
xhcj-finance 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 xhcj-finance？
由 jindongyi011039（@jindongyi011039）开发并维护，当前版本 v1.0.8。
推荐 Skills