ve-exchange-rates
v1.0.5Get Venezuelan exchange rates - BCV official rate, Binance P2P USDT average, and the gap between them. Use when user asks for Venezuelan dollar rates, brecha...
⭐ 1· 1.7k·0 current·0 all-time
by@jehg814
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description (Venezuelan exchange rates) align with the implemented behavior (scrapes BCV, calls Binance P2P, uses a fallback). One small mismatch: the implementation invokes the external 'bc' program for math, but the skill metadata declares no required binaries.
Instruction Scope
SKILL.md instructs running the included scripts. Runtime actions are limited to HTTP requests to BCV, Binance P2P, and an exchangerate fallback, plus local formatting math via 'bc'. The instructions do not read unrelated files or request unexpected credentials.
Install Mechanism
No install spec or external downloads are used; the skill is instruction+bundled code, so nothing is pulled from third-party URLs at install time.
Credentials
The skill does not request environment variables or credentials. Network access to public endpoints (bcv.org.ve, p2p.binance.com, exchangerate-api.com) is required and consistent with the described purpose.
Persistence & Privilege
always is false and the skill does not request persistent or elevated agent-wide privileges. Autonomous invocation is allowed (default) but not combined with other concerning factors.
Assessment
This skill appears to do what it says: scrape BCV and query Binance P2P to compute the parallel gap. Before installing: 1) Be aware the script makes outbound HTTP(S) calls to bcv.org.ve, p2p.binance.com, and exchangerate-api.com — ensure outgoing network access is acceptable. 2) The Python code calls the external 'bc' binary for math; verify 'bc' is present and trusted on hosts that will run the skill (the metadata does not declare this dependency). 3) If BCV and the fallback fail, the script falls back to a hardcoded value (420) — this is a placeholder and can produce misleading output; confirm you accept that behavior. 4) The script runs only included code (no remote installs), and it does not read local credentials or files. If you need higher assurance, review the included get_rates.py content yourself or run it in a sandboxed environment first.Like a lobster shell, security has layers — review code before you run it.
bcvvk979dddb2xvy58d1thd0qqbsgn82054vdolarvk979dddb2xvy58d1thd0qqbsgn82054vexchangevk979dddb2xvy58d1thd0qqbsgn82054vlatestvk97f71yq1k6ssgayzxz89vcnsx847ck8usdtvk979dddb2xvy58d1thd0qqbsgn82054vvenezuelavk979dddb2xvy58d1thd0qqbsgn82054v
License
MIT-0
Free to use, modify, and redistribute. No attribution required.