Farmos Weather

PendingStatic analysis audit pending.

Overview

No static analysis result has been recorded yet. Pattern checks will appear here once the artifact has been analyzed.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Field IDs or coordinates may be sent to the configured weather API to answer weather questions.

Why it was flagged

The skill directs the agent to call a specific HTTP API for weather data. The API use is disclosed and matches the skill purpose, but it is still an external/private service dependency.

Skill content
API Base

http://100.102.77.110:8012
Recommendation

Install only if you expect this farm weather service and trust the API endpoint; avoid using coordinate queries if you do not want location details sent.

What this means

Answers about spraying or field operations may include or rely on farm tasks and observation records.

Why it was flagged

The skill tells the agent to combine weather responses with data from other FarmOS-related skills. This is purpose-aligned for operational decisions, but it expands the data boundary beyond weather.

Skill content
Query farmos-tasks and farmos-observations alongside weather for any field operation question.
Recommendation

Make sure companion FarmOS skills have appropriate permissions and ask for simple weather-only answers when you do not want task or observation context used.

What this means

Users have less context for who maintains the skill and why this specific API endpoint is used.

Why it was flagged

The registry metadata does not provide a source repository or homepage. This is a provenance limitation, though the supplied package is instruction-only with no executable code or install script.

Skill content
Source: unknown
Homepage: none
Recommendation

Verify the publisher and endpoint out of band if this skill will be used for operational farm decisions.