东方财富金融工具集 — 技能工具
v1.0.1东方财富金融数据工具集,集成选股、资讯搜索、行情财务查询三大功能。当用户查询 A股、港股、美股相关数据时使用,包括:条件选股、股票推荐、板块成分股;新闻、公告、研报、政策搜索;实时行情、财务指标、公司信息、资金流向等数据查询。
1· 985·8 当前·8 累计·💬 1
安全扫描
OpenClaw
可疑
high confidenceThe skill's stated purpose (Eastmoney data queries) matches the API usage, but the SKILL.md contradicts the registry metadata and instructs the agent to read a local vault file (~/.openclaw/...) that is not declared—this mismatch and implicit local file access are concerning.
评估建议
Before installing: verify the skill's source and vendor (no homepage/source provided). Confirm whether the skill truly requires EASTMONEY_APIKEY and prefer setting that environment variable yourself rather than relying on the skill to read a local vault. The SKILL.md tells the agent to cat ~/.openclaw/workspace/vault/credentials/eastmoney.json (not declared in the manifest) — this could expose multiple API keys or other sensitive data. If you proceed, either (a) set a single EASTMONEY_APIKEY in ...详细分析 ▾
ℹ 用途与能力
The name/description (Eastmoney financial data: screening, news, query) align with the APIs and API_BASE used. However, the registry metadata earlier claimed no required env vars while SKILL.md declares EASTMONEY_APIKEY as required and documents vault-based multi-key rotation — this metadata mismatch is an inconsistency that should be resolved.
⚠ 指令范围
Runtime instructions explicitly tell the agent to read a local vault file (cat ~/.openclaw/workspace/vault/credentials/eastmoney.json) when the environment variable is absent. That file path is not declared in the skill's manifest. Direct instructions to read local files (especially credential stores) are scope-creep and present a potential data-exposure vector.
✓ 安装机制
No install spec and no code files are present (instruction-only). This minimizes installation risk because nothing is downloaded or written to disk by an installer.
⚠ 凭证需求
Requesting an EASTMONEY_APIKEY is proportionate to the stated purpose. However, the SKILL.md also relies on a vault file containing multiple API keys and instructs reading it without declaring required config paths. That increases the scope of sensitive data access beyond the single API key and is not justified in the manifest.
ℹ 持久化与权限
The skill is not always-enabled and is user-invocable; autonomous invocation is allowed (platform default). Autonomous invocation combined with explicit instructions to read a local vault raises the blast radius if the agent runs the skill without tight file-access controls, so be cautious even though 'always' is false.
安全有层次,运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.12026/3/15
新增多 API Key 轮换功能,支持每日 50+ 次调用
● 无害
安装命令 点击复制
官方npx clawhub@latest install eastmoney-tools
镜像加速npx clawhub@latest install eastmoney-tools --registry https://cn.clawhub-mirror.com
技能文档
统一入口,根据用户 query 自动路由到合适的 API。支持多 API Key 轮换。
API Key 配置
方式 1:单 Key(环境变量)
export EASTMONEY_APIKEY="your-api-key"
方式 2:多 Key 轮换(vault)
从 vault 读取多个 key,按顺序轮换:
cat ~/.openclaw/workspace/vault/credentials/eastmoney.json
vault 文件格式:
{
"name": "Eastmoney API Keys",
"keys": [
"mkt_xxx1",
"mkt_xxx2",
"mkt_xxx3"
]
}
获取 Key
如果没有设置 EASTMONEY_APIKEY,从 vault 读取:
cat ~/.openclaw/workspace/vault/credentials/eastmoney.json
路由规则
根据用户意图自动判断调用哪个 API:
| 用户意图关键词 | 路由到 | API 端点 |
|---|---|---|
| 选股、推荐股票、条件筛选、符合xx的股票、成分股 | 选股 | /finskillshub/api/claw/stock-screen |
| 新闻、资讯、消息、公告、研报、政策、解读 | 资讯搜索 | /finskillshub/api/claw/news-search |
| 股价、市值、PE、市盈率、财报、盈利、利润、收入、资金流向、基本面 | 数据查询 | /finskillshub/api/claw/query |
API 调用
公共配置
API_BASE="https://mkapi2.dfcfs.com"
多 Key 轮换逻辑
- 优先使用环境变量
EASTMONEY_APIKEY - 如果环境变量未设置,从 vault 读取多个 key
- 按顺序尝试每个 key
- 如果返回
status != 0(限流或错误),自动切换下一个 key - 所有 key 都失败后返回错误
1. 选股 API
curl -X POST "${API_BASE}/finskillshub/api/claw/stock-screen" \
-H "Content-Type: application/json" \
-H "apikey: ${API_KEY}" \
-d '{"keyword": "用户查询", "pageNo": 1, "pageSize": 20}'
适用场景:
- 条件选股:"今日涨幅2%的股票"、"市盈率低于10的银行股"
- 板块成分股:"半导体板块的成分股"
- 股票推荐:"低估值高分红的股票推荐"
2. 资讯搜索 API
curl -X POST "${API_BASE}/finskillshub/api/claw/news-search" \
-H "Content-Type: application/json" \
-H "apikey: ${API_KEY}" \
-d '{"query": "用户查询"}'
适用场景:
- 个股资讯:"格力电器最新研报"
- 板块新闻:"新能源政策解读"
- 宏观分析:"美联储加息对A股影响"
3. 数据查询 API
curl -X POST "${API_BASE}/finskillshub/api/claw/query" \
-H "Content-Type: application/json" \
-H "apikey: ${API_KEY}" \
-d '{"toolQuery": "用户查询"}'
适用场景:
- 行情数据:"贵州茅台最新价"
- 财务指标:"宁德时代市盈率"
- 公司信息:"比亚迪主营业务"
错误处理
- 自动重试:当某个 key 被限流(返回非 status=0),自动切换到下一个 key
- 保持返回原始 JSON 格式,不做转换
数据来源:ClawHub ↗ · 中文优化:龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险,如需更匹配、更安全的方案,建议联系付费定制