ThermikBuddy
PassAudited by ClawScan on May 1, 2026.
Overview
ThermikBuddy appears to be a purpose-aligned weather-forecast skill; it runs included Python scripts and sends selected coordinates to weather APIs, with only minor metadata/provenance notes.
This looks appropriate for a soaring-weather forecast skill. Before installing, be aware that it runs local Python code and sends the chosen region or coordinates to weather services; verify aviation-critical forecasts with official sources before flying.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent may run the included Python forecast code when the user asks for soaring-weather information.
The skill directs the agent to execute a bundled Python script. This is expected for generating the forecast, but it means installing the skill authorizes local code execution for its workflow.
python3 {baseDir}/scripts/run_forecast.py --region <region_id> [--days 3]Install only if you are comfortable running the bundled scripts, and avoid granting elevated system permissions.
Your selected region or custom coordinates are shared with an external weather API to generate the forecast.
The script sends latitude, longitude, forecast days, and requested weather variables to Open-Meteo. This is disclosed and purpose-aligned, but coordinates can reveal a planned flying location.
base_url = "https://api.open-meteo.com/v1/forecast"
Use only if you are comfortable sharing the requested location with the weather provider, and avoid entering unnecessarily precise private locations.
The skill’s visible version and runtime declarations are somewhat inconsistent, which may make it harder to confirm exactly which package version is installed.
The registry metadata says version 1.0.3, while SKILL.md declares version 2.0.0 and bundled metadata files show 1.0.2. The package also invokes Python scripts despite no binary requirement being declared.
Version: 1.0.3 ... No install spec — this is an instruction-only skill. Code file presence: 5 code file(s)
Confirm the installed package version and review the bundled scripts if provenance or reproducibility matters to you.