← 返回 Skills 市场
ajanraj

Yahoo Finance

作者 ajanraj · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
22446
总下载
42
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install yahoo-finance
功能描述
Get stock prices, quotes, fundamentals, earnings, options, dividends, and analyst ratings using Yahoo Finance. Uses yfinance library - no API key required.
安全使用建议
Review this skill carefully before installing. Prefer installing uv through a trusted package manager or verified release instead of copying the remote execution commands, and do not run the global symlink or first-run dependency steps until the missing yf script and its exact dependencies are available for review.
功能分析
Type: OpenClaw Skill Name: yahoo-finance Version: 1.0.0 The skill bundle is classified as suspicious due to the use of high-risk installation methods for the `uv` package manager, specifically `curl -LsSf https://astral.sh/uv/install.sh | sh` and `powershell -ExecutionPolicy ByPass -c "irm https://astral.sh/uv/install.ps1 | iex"` found in `SKILL.md`. While `uv` is a legitimate tool and `astral.sh` is its official domain, these methods involve downloading and executing arbitrary remote scripts, which bypasses package manager integrity checks and presents a significant security risk, even if plausibly needed for the skill's stated purpose. There is no clear evidence of intentional malicious behavior like data exfiltration or persistence.
能力评估
⚠ Credentials
Network access and Python dependencies fit the finance-data purpose, but remote script execution and optional global PATH symlinking are broader than needed for a quote lookup tool.
⚠ Install Mechanism
uv, yfinance, and rich are not pinned or hash-verified, and the documented installer paths depend on mutable remote or package-index content after review.
⚠ Instruction Scope
The setup instructions include pipe-to-shell and Invoke-Expression installer commands, including a PowerShell execution-policy bypass, which grants broad local code execution for a dependency install.
ℹ Persistence & Privilege
No hidden service, background worker, memory write, or credential persistence was found; disclosed persistence is limited to uv cache state and an optional global symlink.
⚠ Purpose & Capability
The stated Yahoo Finance lookup purpose is coherent, but the artifact contains only SKILL.md while instructions reference a missing yf executable and unverifiable first-run dependency behavior.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install yahoo-finance
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /yahoo-finance 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release - Stock data CLI powered by yfinance Commands: - price: Quick price check with day/52W range - quote: Detailed quote with volume, market cap - fundamentals: PE, EPS, margins, analyst targets - earnings: Next earnings date + historical EPS surprises - profile: Company sector, industry, employees, description - dividends: Yield, ex-date, payout ratio, recent history - ratings: Buy/hold/sell distribution, upgrades/downgrades - options: Near-the-money calls/puts with IV, volume, OI - history: Historical OHLCV (1d to max) - compare: Side-by-side multi-stock comparison - search: Find symbols by company name Features: - No API key required (uses yfinance) - Auto-installs deps via uv (PEP 723) - Supports US stocks, NSE/BSE, crypto, forex, ETFs - Rich formatted tables
元数据
Slug yahoo-finance
版本 1.0.0
许可证 —
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Yahoo Finance 是什么?

Get stock prices, quotes, fundamentals, earnings, options, dividends, and analyst ratings using Yahoo Finance. Uses yfinance library - no API key required. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 22446 次。

如何安装 Yahoo Finance?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install yahoo-finance」即可一键安装,无需额外配置。

Yahoo Finance 是免费的吗?

是的,Yahoo Finance 完全免费(开源免费),可自由下载、安装和使用。

Yahoo Finance 支持哪些平台?

Yahoo Finance 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Yahoo Finance?

由 ajanraj(@ajanraj)开发并维护,当前版本 v1.0.0。

💬 留言讨论