ve-exchange-rates

Get Venezuelan exchange rates - BCV official rate, Binance P2P USDT average, and the gap between them. Use when user asks for Venezuelan dollar rates, brecha...

Security Scan

The skill's code and instructions match its stated purpose (fetch BCV and Binance P2P rates); there are only minor inconsistencies to review before installing.

Purpose & Capability

Name/description (Venezuelan exchange rates) align with the implemented behavior (scrapes BCV, calls Binance P2P, uses a fallback). One small mismatch: the implementation invokes the external 'bc' program for math, but the skill metadata declares no required binaries.

Instruction Scope

SKILL.md instructs running the included scripts. Runtime actions are limited to HTTP requests to BCV, Binance P2P, and an exchangerate fallback, plus local formatting math via 'bc'. The instructions do not read unrelated files or request unexpected credentials.

Install Mechanism

No install spec or external downloads are used; the skill is instruction+bundled code, so nothing is pulled from third-party URLs at install time.

Credentials

The skill does not request environment variables or credentials. Network access to public endpoints (bcv.org.ve, p2p.binance.com, exchangerate-api.com) is required and consistent with the described purpose.

Persistence & Privilege

always is false and the skill does not request persistent or elevated agent-wide privileges. Autonomous invocation is allowed (default) but not combined with other concerning factors.

Assessment

This skill appears to do what it says: scrape BCV and query Binance P2P to compute the parallel gap. Before installing: 1) Be aware the script makes outbound HTTP(S) calls to bcv.org.ve, p2p.binance.com, and exchangerate-api.com — ensure outgoing network access is acceptable. 2) The Python code calls the external 'bc' binary for math; verify 'bc' is present and trusted on hosts that will run the skill (the metadata does not declare this dependency). 3) If BCV and the fallback fail, the script falls back to a hardcoded value (420) — this is a placeholder and can produce misleading output; confirm you accept that behavior. 4) The script runs only included code (no remote installs), and it does not read local credentials or files. If you need higher assurance, review the included get_rates.py content yourself or run it in a sandboxed environment first.

ve-exchange-rates: Venezuelan Exchange Rates

Get current exchange rates for Venezuela:

1. Tasa BCV - Official Central Bank rate from the BCV website
2. Tasa USDT Binance P2P - Average from P2P market
3. Brecha cambiaria - Gap between official and parallel rates

Usage

Run the wrapper script to get current rates:

./skills/ve-exchange-rates/scripts/get-rates.sh

The shell script is now a thin wrapper around a Python implementation:

python3 ./skills/ve-exchange-rates/scripts/get_rates.py

Output

The script returns:

• BCV official rate (Bs/USD)
• BCV source used
• BCV "Fecha Valor" extracted from the site
• Warning if the BCV date does not match the expected current run window
• Binance P2P USDT rates (buy/sell/average)
• Gap percentage between BCV and P2P
• Example conversion from 100 USD at BCV rate into USDT at P2P rate

Data Sources

• BCV rate: scraped directly from bcv.org.ve
• BCV validation: extracts and validates Fecha Valor from the BCV page
• Fallback for BCV: exchangerate-api.com only if BCV cannot be parsed
• USDT P2P: Binance P2P API (p2p.binance.com)

Notes

• BCV is the primary source and should be treated as the authoritative rate
• The skill warns when the BCV "Fecha Valor" does not match today or tomorrow
• P2P rates fluctuate constantly based on market conditions
• Main implementation now lives in Python for readability and easier auditing
• The shell entrypoint is only a thin wrapper that invokes get_rates.py
• The implementation uses standard library HTTP requests and bc for decimal math formatting compatibility
• If BCV is temporarily unavailable, the skill falls back to a secondary source to preserve functionality