Google Weather
v1.3.0Google Weather API - accurate, real-time weather data. Get current conditions, temperature, humidity, wind, and forecasts. Powered by Google's Weather API fo...
⭐ 5· 5.3k·33 current·33 all-time
byshaharsh@shaharsha
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description request Google Weather data and the skill requires a Google API key. The code calls weather.googleapis.com and maps.googleapis.com for geocoding and forecasting, which is consistent with the declared purpose.
Instruction Scope
SKILL.md instructs the agent to run the included Python script via exec and to set GOOGLE_API_KEY (or alternates). The runtime instructions and code only read environment variables and perform HTTPS requests to Google endpoints; they do not read arbitrary local files or send data to third-party endpoints. Note: the skill requires the ability to execute the bundled script (allowed-tools: exec), which is expected but grants command execution for this skill.
Install Mechanism
No install spec or remote downloads are used; the skill is instruction-only plus a local Python file included in the bundle. No external archives or installers are fetched, minimizing install-time risk.
Credentials
Only GOOGLE_API_KEY is required (with optional GOOGLE_WEATHER_API_KEY/GOOGLE_MAPS_API_KEY and GOOGLE_WEATHER_UNITS). This is proportionate to calling Google’s Weather and Geocoding APIs. Suggest restricting the API key (HTTP referrers/IPs/allowed APIs) because the key can be used to query Google services.
Persistence & Privilege
always is false and the skill does not request system-level persistence or modify other skills. Autonomous invocation is allowed (platform default) but not combined with other concerning privileges.
Assessment
This skill appears coherent with its description: it needs a Google API key and calls Google Weather/Geocoding endpoints. Before installing: (1) ensure you trust the skill owner; (2) restrict the supplied GOOGLE_API_KEY in Google Cloud Console (limit it to only the Weather and Geocoding APIs, set IP or referrer restrictions, and set minimal quotas); (3) be aware the skill will execute the bundled Python script (allowed-tools: exec) and make outbound HTTPS requests to Google—if that is unacceptable for your environment, do not install; (4) ensure the runtime has Python and the requests library available (the package is used but not declared); (5) rotate the key if you later remove the skill or suspect misuse. If you want additional assurance, you can review the full script (lib/weather_helper.py) locally and/or run it in an isolated environment before enabling it in production.Like a lobster shell, security has layers — review code before you run it.
apivk975ema74pb2gzsm81ahk9nb0x80hjreclimatevk975ema74pb2gzsm81ahk9nb0x80hjrecurrent-conditionsvk975ema74pb2gzsm81ahk9nb0x80hjreforecastvk975ema74pb2gzsm81ahk9nb0x80hjregooglevk975ema74pb2gzsm81ahk9nb0x80hjrehumidityvk975ema74pb2gzsm81ahk9nb0x80hjrelatestvk971spjtkyyavswwa4qqp10s3s83czx3real-timevk975ema74pb2gzsm81ahk9nb0x80hjretemperaturevk975ema74pb2gzsm81ahk9nb0x80hjreweathervk975ema74pb2gzsm81ahk9nb0x80hjrewindvk975ema74pb2gzsm81ahk9nb0x80hjre
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🌤️ Clawdis
EnvGOOGLE_API_KEY
Primary envGOOGLE_API_KEY