BMKG Monitor
v1.1.0Monitoring earthquake, weather, and tsunami data in Indonesia using BMKG official data. Use when the user asks about earthquakes, weather forecasts, weather...
⭐ 1· 2.1k·4 current·4 all-time
byAffif Mukhlashin@bluemeda
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill name/description match its behavior: the included Python script fetches JSON/XML from BMKG domains and formats outputs for earthquakes, shakemaps, tsunamis, weather, and warnings. Minor mismatch: the registry metadata lists no required binaries, but SKILL.md and the script expect python3 and the 'requests' library to be available.
Instruction Scope
SKILL.md explicitly instructs running scripts/get_data.py with specific commands; the script only fetches data from BMKG domains (data.bmkg.go.id, api.bmkg.go.id, bmkg.go.id, static.bmkg.go.id), parses JSON/XML, and prints results. It does not access local sensitive files, other environment variables, or external endpoints outside BMKG. Error handling prints to stderr and exits; no broad 'gather context' steps are present.
Install Mechanism
There is no install spec (instruction-only plus an included script). No remote downloads or archive extraction are performed by an installer. The only runtime dependency is the Python script itself and the third-party 'requests' package, which the skill does not automatically install.
Credentials
The skill declares no environment variables, credentials, or config paths and the code does not read any such values. All network requests are to BMKG official hosts; no tokens/secrets are requested or transmitted.
Persistence & Privilege
The skill does not request permanent presence (always is false) and does not modify other skills or system-wide configuration. It is user-invocable and permitted to be invoked autonomously by the agent (platform default), which is reasonable given its limited scope and lack of credentials.
Assessment
This skill is coherent with its description: it fetches public BMKG earthquake, weather, shakemap, and warnings data and prints formatted output. Things to consider before installing/running: (1) The package metadata doesn't declare that python3 and the 'requests' library are required — install them (or run in a Python virtualenv) before use. (2) The script makes outbound HTTP(S) calls to official BMKG hosts; ensure outbound network access is acceptable. (3) As with any third-party code, inspect the included scripts (scripts/get_data.py) yourself or run them in a sandboxed environment if you have security concerns. (4) Allowing autonomous invocation is low risk here because no secrets are exposed, but an autonomous agent could call the endpoints repeatedly — consider rate/usage implications.Like a lobster shell, security has layers — review code before you run it.
latestvk97d6ycjhcyatknwnefe67zer9833g51
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
