Marine Forecast

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Note

ASI02: Tool Misuse and Exploitation

What this means

The agent may make network requests to fetch forecast data when the skill is invoked.

Why it was flagged

The skill directs the agent to use curl for external API calls. This is purpose-aligned and constrained to Open-Meteo weather endpoints.

Skill content

curl -s "https://marine-api.open-meteo.com/v1/marine?latitude=LAT&longitude=LON...

Recommendation

Use it for intended marine forecast lookups and review any generated command if you are concerned about sharing a location.

Note

ASI07: Insecure Inter-Agent Communication

What this means

A precise requested location may be sent to Open-Meteo when retrieving forecasts.

Why it was flagged

Forecast requests include latitude, longitude, and timezone. The provider is disclosed, and this data is necessary for the stated purpose, but it is still a third-party data flow.

Skill content

replace `LAT`, `LON`, and `TZ` in all commands

Recommendation

Avoid using highly sensitive personal locations if you do not want them sent to the weather API provider.