Türkiye AFAD Deprem

PassAudited by ClawScan on May 1, 2026.

Overview

This appears to be a benign public AFAD earthquake-data skill, with minor notes about network access and source provenance.

This skill looks appropriate for querying public AFAD earthquake data. Expect it to use network access to AFAD, avoid changing the source URL unless you trust the alternate endpoint, and review the linked project if publisher provenance is important to you.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI02: Tool Misuse and Exploitation

What this means

The skill may contact AFAD, or another URL if explicitly configured, to retrieve earthquake data.

Why it was flagged

The script performs an HTTP GET to AFAD by default and allows an alternate source URL. This is purpose-aligned for fetching earthquake data, but users should recognize the network target can be changed if that option is used.

Skill content

DEFAULT_SOURCE_URL = "https://deprem.afad.gov.tr/apiv2/event/filter" ... parser.add_argument("--source-url", default=DEFAULT_SOURCE_URL) ... with urlopen(request, timeout=timeout)

Recommendation

Use the default AFAD endpoint unless you intentionally trust an alternate data source.

Info

#ASI04: Agentic Supply Chain Vulnerabilities

What this means

Users have less provenance assurance about who published or maintains the skill.

Why it was flagged

The registry metadata does not identify a verified source, although it provides a homepage. No install script, dependency download, or hidden helper is evidenced, so this is a provenance note rather than a concern.

Skill content

Source: unknown; Homepage: https://github.com/barancaki/turkey_earthquake_skill

Recommendation

Review the linked homepage/repository if publisher provenance matters before installing.