📦 CoolTrade Market Pro - A股行情分析
v1.0.1股票行情与分析大师获取中国A股最新深度财务面、行情与实时新闻异动，一键赋能Agent全天候A股盯盘与行情认知能力。
0· 22·0 当前·0 累计
by @atvisions下载技能包
最后更新
2026/4/21
安全扫描
OpenClaw
安全
high confidenceThe skill's code and instructions are consistent with a market-data integration that queries CoolTrade's HTTP APIs and require a CoolTrade API key; there are no hidden endpoints, installs, or unexpected privileges, but note the key-in-URL pattern and the need to trust the external service.
评估建议
This skill appears to do what it claims: call CoolTrade HTTP APIs for market data. Before installing: 1) Be prepared to create and provide a CoolTrade API key and understand that your queries (stock tickers and any text you submit) will be sent to api.cooltrade.xyz. 2) Prefer configuring the key via an Authorization header or secure credential field rather than embedding it directly in a URL to avoid leakage in logs/referrers. 3) Verify CoolTrade's reputation, terms, and data-retention/privacy p...详细分析 ▾
✓ 用途与能力
Name/description claim real-time market and financial-data access. openclaw.json, SKILL.md and index.js all implement simple HTTP GET endpoints to api.cooltrade.xyz for quotes, news, financials, indexes, US stocks and futures — this matches the stated purpose.
ℹ 指令范围
SKILL.md confines runtime actions to calling CoolTrade HTTP endpoints and instructs the user to provide a personal API key. It does not attempt to read local files or other system secrets. Note: the documentation and openclaw.json show placing the API key in the URL path (sk-XXXXX), which is functional but a weaker practice (keys in URLs can leak via logs or referer headers).
✓ 安装机制
No install spec is present and there are no external downloads. The only shipped code is a tiny index.js that reads openclaw.json to expose the configured HTTP skills — low installation risk.
ℹ 凭证需求
The skill requires a CoolTrade API key to function (SKILL.md explicitly instructs obtaining an sk- key), but the package metadata does not declare env vars or credentials. Requiring a single service API key is proportionate, however embedding the key in the URL path (as shown) is discouraged from a secrecy perspective. Also confirm you intend to send queries and any query text to api.cooltrade.xyz (an external third party).
✓ 持久化与权限
Skill is not always-enabled, has no special platform privileges, and does not modify other skills or system-wide settings. It does not request persistent access beyond calling the external API when invoked.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.12026/4/21
Version 1.1.0 of cooltrade-market-pro expands coverage and adds new data endpoints: - 支持美股、全球大盘和国内期市行情查询，超越原本仅有的A股功能 - 新增 A 股核心财务指标查询与多个全球指数、期货的行情追踪接口 - 技能说明文档（SKILL.md）全面更新，详细列出每项新增接口及用法 - package.json、README.md 等同步版本号和功能描述
● Pending
安装命令
点击复制官方npx clawhub@latest install cooltrade-market-pro
镜像加速npx clawhub@latest install cooltrade-market-pro --registry https://cn.longxiaskill.com镜像同步中