Weather 1.0.0
Security checks across malware telemetry and agentic risk
Overview
This weather skill appears to be a straightforward utility that fetches public weather data and does not show evidence of hidden access, persistence, or data theft.
Install only if you are comfortable with the skill making outbound requests to public weather services and writing requested weather output files such as temporary images. I did not see evidence of credential use, persistence, destructive actions, or unrelated data access.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.