安全扫描
OpenClaw
安全
high confidenceThe skill is coherent with its stated purpose: it wraps Nasdaq's public screener endpoint with a small Bash CLI and documentation, and it does not request unrelated credentials or perform hidden network activity.
评估建议
This skill appears to do what it says: call Nasdaq's public screener endpoint and return rows or symbols. Before installing or running: (1) review the script (scripts/nasdaq-screener.sh) yourself — it issues curl to api.nasdaq.com and is short and readable; (2) ensure your runtime has curl and jq if you plan to use the non-raw output; (3) be aware of Nasdaq rate limits and avoid tight automated loops; (4) run with --print-url first to inspect the generated request and consider running in a sandb...详细分析 ▾
ℹ 用途与能力
Name/description match the actual files: the bundled script queries https://api.nasdaq.com/api/screener/stocks and the docs reference Nasdaq Data Link. Minor inconsistency: the registry metadata lists no required binaries, but the script requires curl (always) and jq (for non-raw output). This is a small operational omission, not a functional mismatch.
✓ 指令范围
SKILL.md instructs the agent to use the provided script or read the bundled API docs; it does not instruct reading unrelated files, exfiltrating data to external endpoints, or accessing other system state. It also advises pacing and validating responses.
✓ 安装机制
No install spec; the skill is instruction-only with an included script and docs. No downloads or archive extraction are performed by the skill.
✓ 凭证需求
The skill does not request environment variables, credentials, or config paths. The only external dependencies are network calls to the Nasdaq API and local binaries (curl, jq).
✓ 持久化与权限
always is false and the skill does not request persistent or elevated privileges, nor does it modify other skills or agent-wide configuration.
安全有层次,运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/2/27
- Initial release of the Nasdaq API skill. - Enables querying Nasdaq public screener APIs for stock lists and data. - Includes a CLI script for fetching screener data with pagination and formatting options. - Bundles references to official Nasdaq API documentation and practical usage notes. - Provides workflow guidelines for API usage, reliability, and data validation.
● 无害
安装命令 点击复制
官方npx clawhub@latest install nasdaq-public
镜像加速npx clawhub@latest install nasdaq-public --registry https://cn.clawhub-mirror.com
技能文档
Use this skill to fetch stock-universe data from Nasdaq's public screener endpoint and to ground API decisions in official Nasdaq Data Link docs.
Workflow
- Confirm scope 之前 calling APIs:
- 如果 task stock screener rows/symbol lists, 使用
scripts/nasdaq-screener.sh. - 如果 task product/API selection, auth, 或 limits, 读取
references/api_docs.md第一个.
- 使用 CLI 代替 的 ad-hoc curl 当...时 possible:
- Run
scripts/nasdaq-screener.sh --help对于 options. - 开始 带有
--limit和--offset对于 deterministic 分页. - 使用
--格式 symbols对于 ticker-仅 输出, 或--格式 rows对于 JSON 行 objects.
- Handle reliability constraints:
- Include browser-点赞 headers (script 做 由 默认).
- Prefer retries 在...中 caller workflows 对于 transient failures.
- Keep requests paced; avoid burst loops.
- 验证 结果 shape 之前 downstream logic:
- Expect top-level
data.rows对于 screener queries. - 失败 fast 如果
status.bCodeMessagepresent 或data.rowsmissing.
Bundled Resources
references/api_docs.md
scripts/nasdaq-screener.sh
https://api.nasdaq.com/api/screener/stocks.
agents/openai.yaml
数据来源:ClawHub ↗ · 中文优化:龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险,如需更匹配、更安全的方案,建议联系付费定制