ClawHub

FX Monitor

v0.1.1

Monitor Bank of China FX rates and manage reusable GBP/HKD/JPY alert workflows. Use when the task involves checking current BOC exchange rates, comparing the...

⭐ 0· 128·0 current·0 all-time
by@xiehuapeng
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
ℹ
Purpose & Capability
The bundled Python script fetches the Bank of China FX page, parses GBP/HKD/JPY rates, stores a local history CSV, and emits key=value alert output — this matches the skill's stated purpose. Minor mismatch: SKILL.md claims a 'portable checker' that 'should work on any user's machine' but the doc instructs running an absolute path (/home/xhp/.openclaw/...), and the package metadata does not declare a required binary; the script requires python3 but no required binaries are listed.
ℹ
Instruction Scope
Runtime instructions are narrowly scoped to running the included checker and handling its key=value output. The main concern is the hard-coded absolute invocation path in SKILL.md which may not exist on other systems; otherwise the instructions do not request unrelated files, credentials, or external endpoints beyond the public BOC URL.
✓
Install Mechanism
There is no install spec (instruction-only) and the skill includes a local Python script and a small CSV. No downloads, external packages, or archive extraction are used.
✓
Credentials
The skill declares no required environment variables or credentials and the script only makes an unauthenticated HTTPS request to the public Bank of China page. It does write a local history CSV in the skill's data folder but does not access or request unrelated secrets.
✓
Persistence & Privilege
The skill is not always-enabled and does not request elevated platform privileges; it writes and appends a local history CSV in its own directory (DEFAULT_HISTORY). SKILL.md references cron management advice, but the skill does not autonomously create or modify system crons in the provided files.
Assessment
This skill appears to be what it says: a small Python checker that fetches the public Bank of China FX page, keeps a local CSV history, and emits alert/status key=value lines. Before installing or running, note the following: (1) SKILL.md tells you to run python3 at an absolute path (/home/xhp/...), which likely won't match your machine — run the included scripts/check_boc_fx.py from the skill workspace or update the path. (2) Ensure you have python3 available (not declared in metadata) and outbound HTTP(S) allowed so the script can reach https://www.boc.cn/sourcedb/whpj/. (3) The script will create/append a local CSV history file (data/boc_fx_history.csv) in the skill folder — confirm you are okay with that write. (4) If you plan to enable a cron, manage cron jobs yourself; the skill does not require or perform system-wide changes. (5) Review/modify THRESH_* values or pass CLI flags for custom thresholds or history path if needed. If you want stronger isolation, run the script in a sandbox or inspect/execute it manually before letting an agent invoke it autonomously.

Like a lobster shell, security has layers — review code before you run it.

latestvk97dhrgxvj38a658c3qd0qx5es832ztx

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments