Macro-Driver-Pro: 宏观晴雨表 — 技能工具
v1.0.3实时获取美元指数和十年期美债收益率数据，支持高确定性宏观资产定价与投资决策。
1· 336·0 当前·0 累计
by 安全扫描
OpenClaw
安全
medium confidenceThe skill's requests and instructions are internally consistent with its stated purpose (fetching DXY and US10Y via a Vercel backend), but it forwards data to an external API and uses an external micro-billing flow (SkillPay) that you should review before use.
评估建议
This skill is coherent for fetching DXY and US10Y via an external API, but it will send requests (including a user_id) to macro-driver-pro.vercel.app and use SkillPay for micro-billing. Before installing: (1) confirm you trust the external endpoint and review the project's GitHub source if you can; (2) ask the developer or platform how SkillPay billing is authorized and billed to avoid unexpected charges; (3) avoid sending any secrets or sensitive data in requests (only send the minimal user_id)...详细分析 ▾
✓ 用途与能力
Name/description promise real-time DXY and US10Y data. The manifest and SKILL.md point to a Vercel backend (macro-driver-pro.vercel.app) that uses yfinance for Yahoo Finance data — this aligns with the stated purpose.
ℹ 指令范围
SKILL.md instructs callers to use the backend endpoint and to include a user_id for SkillPay micro-billing. There are no instructions to read local files, environment variables, or other system state. However, runtime traffic (queries and the user_id) will be sent to the external service; the doc does not specify data retention, logging, or exact billing mechanics.
✓ 安装机制
This is an instruction-only skill with no install spec and no code files to write to disk, so there is no installation risk introduced by the skill itself.
✓ 凭证需求
The skill declares no required environment variables or credentials. It does rely on an external SkillPay billing flow (requiring a user_id param) but does not request unrelated secrets. The lack of declared payment credential requirements is plausible if billing is handled by the platform, but it would be helpful to clarify how SkillPay authenticates and charges users.
✓ 持久化与权限
always is false and the skill does not request persistent system-level privileges or modify other skills. It is not force-included and operates via external API calls only.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.32026/3/10
Officially switch to MIT License and link source provenance
● 无害
安装命令 点击复制
官方npx clawhub@latest install macro-driver-pro
镜像加速npx clawhub@latest install macro-driver-pro --registry https://cn.clawhub-mirror.com
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制