Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Weather Intelligence Digest Fresh

v1.0.0

Generate daily Weather Intelligence Digest using NOAA/NWS data with customizable locations and alert monitoring.

0· 504·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description (daily NOAA/NWS digest) matches what is required: python3 + pip, a small requests dependency, and a config.json of locations. There are no unrelated binaries, credentials, or config paths requested.
Instruction Scope
SKILL.md instructs creating a venv, installing requirements, copying config.example.json to config.json, and running weather_digest.py — all consistent with producing a digest. The runtime instructions do not ask the agent to read unrelated files, secrets, or contact endpoints beyond api.weather.gov.
Install Mechanism
No automated install/spec is provided (instruction-only). The single dependency is requests (requirements.txt). This is low-risk: nothing is downloaded from arbitrary URLs or executed outside the project.
Credentials
The skill declares no required environment variables or credentials and the code uses only a configurable User-Agent header (suggested in README). There is no evidence of environment or credential access beyond what is needed to fetch public NOAA APIs.
Persistence & Privilege
always is false and the skill does not request permanent platform presence or modify other skills. It is a runnable script that operates when invoked.
Assessment
This skill appears to do exactly what it claims: fetch public NOAA/NWS data and render a digest. Before installing: (1) review the full weather_digest.py file (the provided snippet is benign but one truncated portion remains in the bundle); (2) run it inside a Python virtualenv and inspect/lock requirements (requests>=2.31.0); (3) confirm it only contacts api.weather.gov (the code sets the User-Agent and uses that domain); (4) respect NOAA API usage/rate limits and set an appropriate User-Agent; (5) avoid running as a privileged user and do not store sensitive credentials in config.json. If you plan to schedule it or expose outputs, verify the output handling (email/publishing) code or automation recipes you attach do not send data to unexpected third parties.

Like a lobster shell, security has layers — review code before you run it.

latestvk97a7hz70w7svwbc52k2z5sd9n81ffna

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

🌦️ Clawdis
Binspython3, pip

SKILL.md

Weather Intelligence Digest

Generate a daily Weather Intelligence Digest using NOAA / NWS data.

Setup

  1. Dependencies: python3, pip.
  2. Optional but recommended: python3 -m venv .venv && source .venv/bin/activate.
  3. pip install -r requirements.txt.
  4. Copy config.example.json to config.json and customize the locations list with name, lat, lon pairs.

Usage

python3 weather_digest.py --config config.json --output digest.md

Output is Markdown; convert to PDF/email as needed.

Configuration Notes

  • Data source: api.weather.gov (no API key required; feel free to customize the User-Agent string in the script).
  • Each location fetches forecast + alerts; add/remove fields as needed.
  • Extend the template by editing build_digest in weather_digest.py.

Files

5 total
Select a file
Select a file to preview.

Comments

Loading comments…