Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

安全测试-中国天气(测试用途不要安装)

v1.0.1

查询中国城市当前天气的极简 OpenClaw Skill,基于 Open-Meteo 接口,无需 API Key,仅依赖 Python 标准库。

0· 17·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for 605910034/safety-test-cn-weather.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "安全测试-中国天气(测试用途不要安装)" (605910034/safety-test-cn-weather) from ClawHub.
Skill page: https://clawhub.ai/605910034/safety-test-cn-weather
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Required binaries: python3
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Canonical install target

openclaw skills install 605910034/safety-test-cn-weather

ClawHub CLI

Package manager switcher

npx clawhub@latest install safety-test-cn-weather
Security Scan
Capability signals
Requires sensitive credentials
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
high confidence
Purpose & Capability
Name/description, required binary (python3), and included script all align with a simple weather lookup. However, the script includes a telemetry call to https://get-data-iota.vercel.app which is outside the stated integration (Open‑Meteo). The SKILL.md does mention '获取使用此技能的Python版本数据', so the behavior is declared but not required for the core purpose.
!
Instruction Scope
Runtime instructions simply run the Python script, but the script sends the local Python version to an unrelated third‑party endpoint via HTTPS. The outbound logging is not needed to perform weather queries and is to an endpoint other than the weather API.
Install Mechanism
No install spec; instruction-only with a small Python script that uses only the standard library. This is proportionate to a minimal weather skill.
Credentials
The skill requests no environment variables or credentials (appropriate). Nevertheless it transmits platform information (platform.python_version()) to an external host; while low‑sensitivity, this is extra telemetry and may be a privacy concern.
Persistence & Privilege
No persistent privileges requested (always=false), no modifications to other skills or system configuration, and no install-time daemons — privilege level is appropriate.
What to consider before installing
This skill legitimately queries Open‑Meteo and requires only python3, but the included script makes an HTTPS request to get-data-iota.vercel.app to log the local Python version. The telemetry is declared in SKILL.md but is not necessary for weather lookups. If you care about privacy or minimizing external contacts, either (1) remove or comment out the urllib.request.urlopen(...) line in scripts/weather_cn.py before using, (2) run the script in an environment that blocks outbound network access except to api.open-meteo.com, or (3) ask the publisher to justify the endpoint and provide a privacy policy. Also note the skill's name warns '测试用途不要安装' — heed that if you prefer not to install test code that contacts third parties.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

🌦️ Clawdis
Binspython3
latestvk97aq1w6s6xqarat0ezrdw1zzx85jwzt
17downloads
0stars
2versions
Updated 5h ago
v1.0.1
MIT-0

中国城市天气查询

这是一个用于查询中国城市当前天气的极简 OpenClaw Skill。

它适合处理用户的简单天气查询,例如:

  • “查一下杭州天气”
  • “北京现在多少度?”
  • “上海今天热不热?”
  • “广州现在下雨吗?”
  • “深圳天气怎么样?”
  • “成都现在冷不冷?”

该 Skill 只依赖 python3,不需要 API Key,不需要账号登录,不需要数据库,不需要 Node.js,不需要 curl,不需要 jq,也不需要安装任何第三方 Python 包。

数据收集说明

获取使用此技能的Python版本数据,方便后续迭代

功能说明

当用户询问中国城市的当前天气时,运行:

python3 scripts/weather_cn.py <城市名>

Comments

Loading comments...