Instructions for querying Wise, a money-transfer service, for current or past mid-market currency exchange rates.

It helps retrieve one currency pair, all target currencies for a source currency, a rate at a specific time, or a daily historical series.

It provides a consistent way to check rates and investigate differences between Wise and Frankfurter, another exchange-rate source.

How lineofflight/frankfurter configures Claude Code and Codex

About the project

Frankfurter is an open-source API that provides daily currency exchange rates collected from institutional sources. Developers use it to retrieve currency data, convert amounts, or run their own instance with Docker. The catalogue entries are add-ons for working with the API.

lineofflight/frankfurter · 2,069 stars · on GitHub · frankfurter.dev

Reuse

Borrowing it

Nothing to install: this file belongs to lineofflight/frankfurter. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file

curl -O https://raw.githubusercontent.com/lineofflight/frankfurter/main/.agents/skills/querying-wise-api/SKILL.md

Clone the repo

git clone --depth 1 https://github.com/lineofflight/frankfurter

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/lineofflight/frankfurter/querying-wise-api/github.svg)](https://agentmods.dev/skills/lineofflight/frankfurter/querying-wise-api)

Your own site

<a href="https://agentmods.dev/skills/lineofflight/frankfurter/querying-wise-api"><img src="https://agentmods.dev/badge/skills/lineofflight/frankfurter/querying-wise-api/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/lineofflight/frankfurter/querying-wise-api"><img src="https://agentmods.dev/badge/skills/lineofflight/frankfurter/querying-wise-api.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 43 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 1,119 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 1 finding. A grade says what 26 rules found in the file — not that it is safe. Third-party audits

NVIDIA SkillSpector warn 7 Sept 2026

SkillSpector: 8 findings, up to medium

These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →

medium Data Exfiltration · line 12
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.
medium Data Exfiltration · line 19
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.
medium Data Exfiltration · line 23
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.
medium Data Exfiltration · line 32
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.
medium Data Exfiltration · line 39
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.
medium Data Exfiltration · line 80
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.
medium Data Exfiltration · line 100
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.
medium Data Exfiltration · line 104
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.

How audits are shown

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00043	$0.01119
Opus 5.5	$0.00017	$0.00448
Sonnet 5.5	$0.00009	$0.00224
Haiku 4.5	$0.00004	$0.00112

Measured 2mo ago against content hash 7e5ba01400c9, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

wise-api scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

curl -s -H "Authorization: Bearer $WISE_API_KEY" \

.agents/skills/querying-wise-api/SKILL.md · 113 lines

How it starts

The opening of the file, as written. The whole thing — 113 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Wise Exchange Rate API

Query real-time and historical mid-market rates from Wise for troubleshooting and data validation.

Endpoints

Base: https://api.wise.com/v1/rates

Current rates

# Single pair
curl -s -H "Authorization: Bearer $WISE_API_KEY" \
  'https://api.wise.com/v1/rates?source=EUR&target=USD' | jq

# All targets for a source (omit target entirely)
curl -s -H "Authorization: Bearer $WISE_API_KEY" \
  'https://api.wise.com/v1/rates?source=EUR' | jq

target only accepts a single currency. Comma-separated lists (target=USD,GBP,JPY) return 400 Bad Request. For multiple pairs from the same source, omit target to get all ~163 currencies in one call and filter the response locally. Loop per-pair only as a last resort.

Historical rate at a specific time

curl -s -H "Authorization: Bearer $WISE_API_KEY" \
  'https://api.wise.com/v1/rates?source=EUR&target=USD&time=2025-06-15T12:00:00' | jq

Historical rate series

curl -s -H "Authorization: Bearer $WISE_API_KEY" \
  'https://api.wise.com/v1/rates?source=EUR&target=USD&from=2025-06-01&to=2025-06-30&group=day' | jq

Parameters

Param	Description	Example
`source`	Source currency (required)	`EUR`
`target`	Single target currency (omit for all)	`USD`
`time`	Single historical timestamp (ISO 8601)	`2025-06-15T12:00:00`
`from`	Period start (date or timestamp)	`2025-06-01`
`to`	Period end (date or timestamp, tz offset ok)	`2025-06-30T23:59:59+0100`
`group`	Grouping interval for series	`day`, `hour`, `minute`

Response

[
  {
    "rate": 1.08234,
    "source": "EUR",
    "target": "USD",
    "time": "2025-06-15T12:00:00+0000"
  }
]

Read the full file on GitHub · 113 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

2mo ago First seen · 113 lines · 43 tokens per session scan A 7e5ba01400c9

Subscribe to this mod's changes

wise-api is a skill published in the GitHub repository lineofflight/frankfurter (2,069 stars, last pushed 2d ago), licensed MIT. It adds 43 tokens to every session and 1,119 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Finance and fintech Ruby api currency currency-api currency-converter money

wise-api next to 6 skills from other repositories
Mod	Type	Stars	Last push	Licence	Scan	Tokens	Works with
wise-apilineofflight/frankfurter	Skill	2.1k	2d ago	MIT	A	43	Claude Code, Codex
gmgn-contract-ddGMGNAI/gmgn-skills	Skill	645	8d ago	MIT	A	367	Claude Code
gmgn-marketGMGNAI/gmgn-skills	Skill	645	8d ago	MIT	A	153	Claude Code
gmgn-heat-rankGMGNAI/gmgn-skills	Skill	645	8d ago	MIT	A	728	Claude Code
gmgn-swapGMGNAI/gmgn-skills	Skill	645	8d ago	MIT	A	399	Claude Code
gmgn-wallet-analysisGMGNAI/gmgn-skills	Skill	645	8d ago	MIT	A	290	Claude Code
gmgn-wallet-scoreGMGNAI/gmgn-skills	Skill	645	8d ago	MIT	A	232	Claude Code

frankfurter: Skill for Claude Code