Stock

Retrieve real-time stock data including price, change, volume, and turnover for A-share, Hong Kong, and US markets via Sina Finance.

This skill appears safe to run from a permissions standpoint (no secrets requested, only outgoing HTTPS to Sina), but it misrepresents functionality: despite examples and description claiming US-market support (AAPL, MSFT), the bundled CLI only accepts numeric A-share (6 digits) and Hong Kong (5 digits) tickers and will reject letter-based US symbols. If you need US stocks, do not rely on this skill. If you want to proceed: (1) test it locally with numeric A/HK tickers to confirm behavior, (2) avoid providing any extra credentials (none are required), and (3) request or inspect an updated version from the author if US support is required. If you are unsure, consider installing in a controlled environment or asking the maintainer to fix the documentation/examples to match the implementation.

Type: OpenClaw Skill Name: xiaoding-stock Version: 1.0.3 The skill is a legitimate stock query tool that fetches real-time market data from the Sina Finance API (hq.sinajs.cn). While there is a minor discrepancy where SKILL.md claims US stock support but bin/stock.js only implements A-share and HK stock logic, the code is safe and well-structured. It uses standard Node.js modules, includes input validation via regex to prevent injection, and shows no signs of data exfiltration or malicious execution.