Weather Test
v1.0.0Get current weather and forecasts (no API key required).
⭐ 0· 79·0 current·0 all-time
byErhWen Kuo@erhwenkuo
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill's name/description (weather, no API key) matches the instructions (curl to wttr.in and Open-Meteo). Minor metadata mismatch: SKILL.md metadata lists curl as a required binary, but the registry 'Requirements' section lists no required binaries. Requiring curl is reasonable for this skill.
Instruction Scope
Runtime instructions are limited to issuing HTTP requests (curl) to public weather services and optionally saving a PNG to /tmp. The instructions do not ask the agent to read unrelated files, access credentials, or transmit data to unexpected endpoints.
Install Mechanism
There is no install spec and no code files — the skill is instruction-only, which minimizes on-disk risk. It relies on existing system tools (curl) rather than downloading artifacts.
Credentials
The skill requests no environment variables, secrets, or config paths. This is proportionate to the stated functionality (public, keyless APIs).
Persistence & Privilege
The skill is not always-enabled and uses the platform default for autonomous invocation. It does not request elevated persistence or modify other skills' configuration.
Assessment
This skill appears coherent and low-risk: it simply runs curl against public weather APIs and requires no secrets. Before installing, confirm you are comfortable allowing the agent to make outbound HTTP requests (the agent may call these endpoints autonomously unless you disable that behavior), and ensure curl is available in the runtime environment. Be aware that queries transmit the location strings you provide to third-party services (wttr.in, open-meteo), so avoid sending sensitive or private location data. Finally, note the small metadata mismatch about the required binary (curl) — that's expected, not malicious; verify curl is present if you want the examples to work.Like a lobster shell, security has layers — review code before you run it.
latestvk978fdhy0dg5fsje5genfg68y983sxv5
License
MIT-0
Free to use, modify, and redistribute. No attribution required.