BMKG Monitor
PassAudited by ClawScan on May 1, 2026.
Overview
The skill coherently fetches public BMKG earthquake and weather data using a disclosed Python helper, with only minor install/provenance clarity notes.
This appears safe for its stated purpose of checking BMKG public earthquake and weather data. Before installing, note that it runs a local Python script, requires the Python requests package even though no install spec is provided, and sends requested BMKG location or event queries to public BMKG endpoints.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Users may need a Python environment with the requests package installed, and should understand the included helper code is what performs the public BMKG data fetches.
The helper depends on the external requests package and performs HTTP requests, while the supplied install specifications declare no required binaries or install steps. This is purpose-aligned but worth noting for installation/provenance clarity.
import requests ... response = requests.get(url, timeout=timeout)
Confirm the local Python environment and dependency source before use; adding an explicit requirements file or install spec would improve clarity.
When used, the skill will contact BMKG-hosted endpoints and may include the requested ADM4 location code or event ID in those requests.
The skill documents command-driven network lookups to BMKG endpoints. This is expected for the purpose and does not show credential use, local data collection, or mutation, but users should notice that location/event query values are sent to public BMKG services.
python3 scripts/get_data.py weather <ADM4_CODE> # 3-day forecast for location ... | Weather forecast | `api.bmkg.go.id/publik/prakiraan-cuaca` | JSON |
Use only non-sensitive location/event queries you are comfortable sending to BMKG public services.