CMB HKD-CNY Exchange caculator in REALTIME
v1.0.0查询招商银行外汇牌价（中间价）
⭐ 0· 336·0 current·1 all-time
byHorsley Lee@horsley
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (query CMB FX middle rate) matches the instructions (curl the official CMB API). Minor inconsistency: the registry metadata lists no required binaries, while the SKILL.md frontmatter indicates 'curl' is required.
Instruction Scope
The SKILL.md explicitly directs the agent to call the official API (https://fx.cmbchina.com/api/v1/fx/rate), filter for HKD, and compute the mid-rate; it does not request unrelated files, credentials, or external endpoints.
Install Mechanism
No install spec (instruction-only) which is low risk. The example uses curl and pipes to jq; jq is used in the example but not declared as a required binary in either the registry metadata or SKILL.md frontmatter, so ensure the runtime has both curl and jq available.
Credentials
No environment variables, credentials, or config paths are requested — proportional to the simple read-only API query the skill performs.
Persistence & Privilege
Skill is not always-enabled and requests no persistent system modifications or cross-skill configuration; autonomous invocation is allowed by default (normal) but does not amplify any other risk here.
Assessment
This skill is coherent and appears to do exactly what it says: curl the official CMB FX endpoint and compute the HKD mid-rate. Before installing, confirm your agent environment has curl and jq (the example uses jq but it isn't consistently declared). Also verify you trust the skill source/network policy because the skill will make outbound requests to fx.cmbchina.com. No credentials are requested.Like a lobster shell, security has layers — review code before you run it.
latestvk971st3xyrh8vrh6vqney64myd81vp65
License
MIT-0
Free to use, modify, and redistribute. No attribution required.