扫描报告
5 /100
ve-exchange-rates
Get Venezuelan exchange rates - BCV official rate, Binance P2P USDT average, and the gap between them
Legitimate exchange rate fetcher using only standard library HTTP requests and documented subprocess for math operations.
可以安装
No action needed - the skill is safe to use as a standard financial data aggregator.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | NONE | NONE | — | No filesystem access in code |
| 网络访问 | READ | READ | ✓ 一致 | HTTP GET/POST to bcv.org.ve, Binance P2P API, exchangerate-api.com |
| 命令执行 | NONE | NONE | — | subprocess.call only to 'bc' calculator, documented |
| 环境变量 | NONE | NONE | — | No os.environ access |
| 剪贴板 | NONE | NONE | — | No clipboard access |
| 浏览器 | NONE | NONE | — | No browser automation |
| 数据库 | NONE | NONE | — | No database access |
| 技能调用 | NONE | NONE | — | No skill invocation |
3 项发现
中危 外部 URL 外部 URL
https://www.bcv.org.ve/ scripts/get_rates.py:10 中危 外部 URL 外部 URL
https://p2p.binance.com/bapi/c2c/v2/friendly/c2c/adv/search scripts/get_rates.py:11 中危 外部 URL 外部 URL
https://api.exchangerate-api.com/v4/latest/USD scripts/get_rates.py:12 目录结构
4 文件 · 8.3 KB · 230 行 Python 1f · 168L
Markdown 1f · 53L
JSON 1f · 5L
Shell 1f · 4L
├─
▾
scripts
│ ├─
get_rates.py
Python
│ └─
get-rates.sh
Shell
├─
_meta.json
JSON
└─
SKILL.md
Markdown
安全亮点
✓ Uses only Python standard library (urllib.request, subprocess, json, re)
✓ All network endpoints declared in SKILL.md: bcv.org.ve, p2p.binance.com, exchangerate-api.com
✓ subprocess usage limited to 'bc -l' calculator for decimal math, documented
✓ No credential harvesting or sensitive file access
✓ No obfuscation, base64 encoding, or suspicious patterns
✓ No data exfiltration beyond necessary exchange rate data
✓ Clean codebase with straightforward financial data aggregation logic
✓ Shell wrapper is a thin pass-through to Python implementation