← 返回 Skills 市场
497
总下载
0
收藏
6
当前安装
1
版本数
在 OpenClaw 中安装
/install yfinance-cli
功能描述
Fetch live financial data from Yahoo Finance. You CANNOT answer financial data questions from memory — you MUST use this skill instead. Trigger whenever the...
安全使用建议
This skill appears to be an instruction-only wrapper around a community npm package. Before installing or relying on it: 1) Verify the 'yahoo-finance' CLI is actually available in your agent's runtime, and that 'jq' (used for JSON parsing) is present. 2) If the CLI is missing, install it from a trusted source (review the npm package 'yahoo-finance2' repo, maintainer, and release artifacts) rather than blindly running npm -g. 3) Confirm the package version and check for recent vulnerabilities or malicious reports. 4) Test commands in a sandbox environment first (the SKILL.md runs shell commands). 5) Be aware of API/rate limits and legality of scraping data for your jurisdiction. The inconsistencies (claims of a global install but no install or binary requirements declared) make this skill suspicious but not clearly malicious.
功能分析
Type: OpenClaw Skill
Name: yfinance-cli
Version: 1.0.0
The skill provides a legitimate interface for fetching financial data from Yahoo Finance using a globally installed CLI tool. The SKILL.md file contains detailed, helpful instructions for the AI agent on handling specific API quirks, formatting stock symbols (particularly for international markets), and parsing JSON output using 'jq'. No indicators of malicious intent, data exfiltration, or harmful command execution were found.
能力评估
Purpose & Capability
The skill's name and description match its instructions (a CLI wrapper around yahoo-finance2). However the metadata declares no required binaries or install steps while the instructions repeatedly assume a global 'yahoo-finance' CLI and use of 'jq' — those are required to actually run the skill but are not declared, which is an incoherence.
Instruction Scope
SKILL.md stays within the stated purpose (fetching Yahoo Finance data) and describes concrete commands and JSON outputs. It does not request unrelated files or credentials. Note: it requires running shell commands and piping to jq and assumes the CLI is present; it also instructs parallel calls and suppressing stderr (2>/dev/null).
Install Mechanism
There is no install spec, yet the doc claims the package is 'Installed via `npm install -g yahoo-finance2`' and globally available as `yahoo-finance`. This mismatch means the agent environment may not actually have the CLI; absence of an install mechanism or provenance for the npm package is a risk and an inconsistency.
Credentials
The skill requests no environment variables, credentials, or config paths — that is proportionate for a read-only data lookup skill. No secret access is requested.
Persistence & Privilege
The skill is not always-enabled and does not request elevated persistent privileges or modify other skills. Autonomous invocation is allowed (platform default) and is not combined with other high-risk factors.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install yfinance-cli - 安装完成后,直接呼叫该 Skill 的名称或使用
/yfinance-cli触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release of Yahoo Finance CLI for Agents
元数据
常见问题
Yahoo Finance CLI 是什么?
Fetch live financial data from Yahoo Finance. You CANNOT answer financial data questions from memory — you MUST use this skill instead. Trigger whenever the... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 497 次。
如何安装 Yahoo Finance CLI?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install yfinance-cli」即可一键安装,无需额外配置。
Yahoo Finance CLI 是免费的吗?
是的,Yahoo Finance CLI 完全免费(开源免费),可自由下载、安装和使用。
Yahoo Finance CLI 支持哪些平台?
Yahoo Finance CLI 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Yahoo Finance CLI?
由 xiwenjun(@gddezero)开发并维护,当前版本 v1.0.0。
推荐 Skills