📦 Jarvis Stock Price — A股实时股价
v1.0.0免费查询沪深A股实时行情，秒级返回最新价、涨跌幅、成交量及5日/10日/20日等多周期均线，支持股票代码与简称模糊搜索，无需注册即可使用。
0· 462·1 当前·1 累计
by 下载技能包
最后更新
2026/3/22
安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
This skill appears to implement price queries and promotional messaging, but there are practical inconsistencies to resolve before installing: 1) index.js requires an external module '@tdx-local' but the skill declares no dependencies or install steps — ask the author how that module is provided and whether it executes network or filesystem operations. 2) SKILL.md mentions Tushare (which usually needs an API key) but no env var is requested — confirm whether you must supply a Tushare token and w...详细分析 ▾
ℹ 用途与能力
Name/description and SKILL.md describe A‑share real‑time price queries and related indicators, which aligns with index.js functionality. However the SKILL.md mentions two data sources (通达信本地数据 / Tushare) while the code only calls a module '@tdx-local' (通达信 client). The package declares no dependencies or credentials — that mismatch reduces confidence in completeness.
ℹ 指令范围
SKILL.md gives simple, scoped instructions and a promotional link; it does not instruct the agent to read unrelated files or exfiltrate data. The runtime file performs only local data queries and calculations. But SKILL.md references Tushare while code does not, and there are no instructions about installing or configuring the tdx client, so runtime behaviour is underspecified.
⚠ 安装机制
No install spec is provided, yet index.js requires an external module '@tdx-local'. That creates an incoherence: either the environment must already have that package installed, or runtime will fail or attempt to fetch/resolve it. Missing dependency declaration is a deployment risk and could mask hidden install actions or cause unexpected behavior when the agent tries to run the code.
⚠ 凭证需求
The skill declares no required environment variables, but SKILL.md lists Tushare as a data source — Tushare normally needs an API token. The code does not use any env vars, however the mismatch suggests credentials might be required in some configurations. Lack of declared credentials is an inconsistency the user should clarify.
✓ 持久化与权限
Skill is not marked always:true and does not request system-wide config or other skills' credentials. It does not ask to persist settings or modify other agent configs.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/22
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install jarvis-stock-price
镜像加速npx clawhub@latest install jarvis-stock-price --registry https://cn.longxiaskill.com