Weather

Get current weather and forecasts (no API key required).

Security Scan

The skill is internally consistent: it only instructs using curl to query public weather endpoints (wttr.in and open-meteo), requires no credentials, and has no install steps or hidden behavior.

Purpose & Capability

Name/description (weather, no API key) match the requirements and instructions: only curl is needed and examples call wttr.in and open-meteo, both public weather services.

Instruction Scope

SKILL.md contains concrete curl examples to fetch text/PNG/JSON from wttr.in and open-meteo. It does not instruct reading local files, environment secrets, or contacting unexpected endpoints beyond the documented services.

Install Mechanism

No install spec or code is present. This is an instruction-only skill that relies on an existing curl binary, which is declared in the metadata.

Credentials

The skill requests no environment variables, credentials, or config paths. This is proportional to its stated function.

Persistence & Privilege

Skill does not request always:true or other elevated persistent privileges and is user-invocable only; autonomous invocation is allowed by default but is typical and not combined with other red flags here.

Assessment

This skill is straightforward and appears safe: it runs curl against public weather services and asks for no secrets. Things to consider before installing: (1) network access is required—queries (including city names or coordinates) are sent to third-party servers, so avoid sending sensitive location data if you care about privacy; (2) examples include downloading PNGs to /tmp, so the agent may write transient files—ensure you’re comfortable with that; (3) because the skill interpolates location input into URLs, be cautious about untrusted inputs (validate/sanitize if you automate this to avoid unexpected requests). If any of these are concerns, restrict network access or review how the agent constructs queries before enabling the skill.

Two free services, no API keys needed.

wttr.in (primary)

Quick one-liner:

curl -s "wttr.in/London?format=3"
# Output: London: ⛅️ +8°C

Compact format:

curl -s "wttr.in/London?format=%l:+%c+%t+%h+%w"
# Output: London: ⛅️ +8°C 71% ↙5km/h

Full forecast:

curl -s "wttr.in/London?T"

Format codes: %c condition · %t temp · %h humidity · %w wind · %l location · %m moon

Tips:

• URL-encode spaces: wttr.in/New+York
• Airport codes: wttr.in/JFK
• Units: ?m (metric) ?u (USCS)
• Today only: ?1 · Current only: ?0
• PNG: curl -s "wttr.in/Berlin.png" -o /tmp/weather.png

Open-Meteo (fallback, JSON)

Free, no key, good for programmatic use:

curl -s "https://api.open-meteo.com/v1/forecast?latitude=51.5&longitude=-0.12&current_weather=true"

Find coordinates for a city, then query. Returns JSON with temp, windspeed, weathercode.

Docs: https://open-meteo.com/en/docs