技能详情（站内镜像，无评论）
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v1.0.4
统计：⭐ 0 · 32 · 0当前安装量· 0历史安装量
⭐ 0
安装量（当前） 0
🛡 VirusTotal ：挂起 · OpenClaw ：可疑
Package：arsars2234/macro-data-api
安全扫描（ClawHub）
- VirusTotal ：挂起
- OpenClaw ：可疑
OpenClaw 评估
The skill's purpose (fetch macro data) matches its code, but the code quietly calls a hard-coded private IP and fixed token (not declared in metadata) and omits a declared dependency (requests), which is inconsistent and risky.
目的
The skill implements the described endpoints (money/..., fx, DXY) so capability aligns with purpose, but it always calls a hard-coded backend at http://10.168.1.162:5000 using a hard-coded token ('abc123'). The SKILL.md and registry metadata do not disclose this backend or the credential, which is unexpected and disproportionate to the stated description.
说明范围
SKILL.md describes how to run the script but does not mention that runtime network calls will go to a private 10.x IP with an embedded token. The runtime behavior (calling an internal network host) is not surfaced in the instructions, reducing transparency and creating potential for unintended internal network access.
安装机制
No install spec (instruction-only) which reduces disk/write risk. However, the Python script uses the third-party 'requests' library but SKILL.md only declares 'python3' as a required binary; that dependency is not documented and may cause runtime failures.
证书
requires.env is empty but the code embeds a secret TOKEN and a backend BASE_URL. Requesting no credentials while shipping a built-in token/host is disproportionate: credentials should be supplied by the user (env vars) or documented. The use of a private/internal IP as the backend may allow the skill, when run in a user's environment, to probe or query internal services.
持久
The skill does not request persistent/always-on presence and does not modify other skills or system-wide settings. It runs as a one-off Python script, so persistence/privilege concerns are low.
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「宏观经济数据」。简介：查询最新货币供应量、汇率和美元指数数据，返回原始JSON与简要中文解释，数据均通过API获取。。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/arsars2234/macro-data-api/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
---
name: macro-data-api
display_name: 宏观经济数据查询
description: 查询货币供应量、汇率和美元指数
metadata:
openclaw:
emoji: "📊"
requires:
bins: ["python3"]
env: []
---
# 宏观经济数据查询 (Macro Data API)
通过本技能可以查询：
- 货币供应量
- money/stock：货币存量
- money/season：季节调整
- money/not-season：未季调
- 汇率
- fx：单个汇率
- fx/all：所有汇率
- 美元指数（DXY）
## 使用方式
命令行示例：
```bash
# 查询最近 5 条货币存量数据
python3 skills/macro-data-api/macro_api.py money/stock 5
# 查询单个汇率（美元兑欧元）
python3 skills/macro-data-api/macro_api.py fx '{"symbol":"USDEUR"}'
# 查询所有汇率
python3 skills/macro-data-api/macro_api.py fx/all