📦 jd-finance — 京东金融理财
v1.0.0一站式接入京东金融理财、白条、金条、保险、信用卡及投资服务，实现账户余额、收益、还款、投保、申卡等全流程自动化管理。
0· 296·0 当前·0 累计
by 下载技能包
最后更新
2026/4/3
安全扫描
OpenClaw
可疑
medium confidenceThe skill claims active JD Finance account management (view holdings, make purchases, check credit) but is an instruction-only doc with no auth, API endpoints, or install steps — that mismatch is suspicious.
评估建议
This skill reads like a product description rather than a functioning connector. Before installing or using it: 1) Ask the author how it accesses user accounts — does it use official JD APIs/OAuth? Where are credentials kept? 2) Never paste passwords or API keys into chat; prefer OAuth flows or platform-managed credentials. 3) If the skill later asks you to provide account credentials directly, treat that as a red flag and decline. 4) Prefer skills with a homepage, source repository, or clear au...详细分析 ▾
⚠ 用途与能力
The description and examples imply access to user-specific account data and transaction capabilities (查看持仓/还款/借款/购买). However the skill declares no credentials, no API endpoints, and no install steps — there is no explained mechanism for accessing a user's JD account, which is disproportionate to the claimed functionality.
ℹ 指令范围
SKILL.md is high-level and contains example queries and feature lists but does not instruct the agent to call JD APIs, request credentials, or read local files. That makes the instructions internally vague: if the agent is expected to answer account-specific queries, the skill provides no guidance on how to obtain or use authenticated data.
✓ 安装机制
No install spec and no code files — lowest-risk delivery model. Nothing will be written to disk by the skill itself.
⚠ 凭证需求
The skill requests no environment variables or credentials despite describing actions that would require account authentication. Either the skill is only informational (which should be made explicit) or it omits necessary auth requirements — both are problematic for user expectations and security.
✓ 持久化与权限
Defaults are used (not always:true). The skill can be invoked by the agent autonomously, which is normal and not in itself a red flag.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/3
Initial release of JD Finance skill with comprehensive support for JD’s financial services: - Provides information and management for JD’s investment products (定期/活期理财、基金、贵金属等) - Supports full workflow for JD BaiTiao (白条) and JinTiao (金条) financial services, including loan and repayment queries - Includes insurance product browsing, purchasing, and claims - Supports JD credit card applications and management - Enables consolidated asset and earnings queries, risk assessment, and investment advice
● 无害
安装命令
点击复制官方npx clawhub@latest install jd-finance
镜像加速npx clawhub@latest install jd-finance --registry https://cn.longxiaskill.com镜像同步中