Climate
v2.0.0Climate - command-line tool for everyday use Use when you need climate.
⭐ 0· 208·0 current·0 all-time
bybytesagain4@xueyetianya
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (local climate CLI, logging, export) matches the delivered code: the script implements commands for run/check/export/stats/etc and stores data in ~/.local/share/climate. There are no unexpected external services, binaries, or credential requirements.
Instruction Scope
SKILL.md claims you can set CLIMATE_DIR to change the data directory, but the script hardcodes DATA_DIR from HOME and does not read CLIMATE_DIR. There are also small internal inconsistencies (e.g., _log writes timestamps with a space/colon format, but some status code attempts to cut fields using '|' separators). These are bugs/scope mismatches rather than malicious behavior, but they mean the runtime behavior may not match the documentation.
Install Mechanism
No install spec (instruction-only) and a single shell script included. No downloads, package installs, or external installers — this is low-risk from an install mechanism perspective.
Credentials
The skill declares no required environment variables or credentials. SKILL.md references CLIMATE_DIR as configurable, but the shipped script ignores it — a documentation/implementation mismatch. Otherwise there are no unexpected env or credential accesses.
Persistence & Privilege
The skill does not request always:true, does not modify other skills or system-wide settings, and only reads/writes files under a per-user data directory (~/.local/share/climate). It does not add persistent privileged behavior beyond its own files.
Assessment
This skill appears to be what it claims: a local CLI that logs activity and can export local data. Before installing or running it: (1) review and accept that data is stored unencrypted under ~/.local/share/climate (check and set filesystem permissions if needed); (2) note the SKILL.md vs script mismatch—CLIMATE_DIR is advertised but not honored by the script; (3) the script has minor bugs (history format vs parsing) that can affect stats/last-activity reporting—consider fixing those if you rely on accurate reporting; (4) there's no network activity or credential access, which limits risk, but you should still inspect the included script yourself and back up any important files before use. If you need the ability to relocate the data directory or want stronger privacy (encryption), ask the author or modify the script to honor CLIMATE_DIR and to store data with the desired protections.Like a lobster shell, security has layers — review code before you run it.
latestvk97111ed9eqa45w2st6t1a5qzx832p35
License
MIT-0
Free to use, modify, and redistribute. No attribution required.