DHMZ Weather
v1.0.0Get Croatian weather data, forecasts, and alerts from DHMZ (meteo.hr) - no API key required.
⭐ 1· 1.7k·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description, required binary (curl), and the listed endpoints are consistent: the skill simply fetches public XML weather data from DHMZ and related Croatian sites. No credentials, unrelated binaries, or surprising config paths are requested.
Instruction Scope
SKILL.md instructs the agent to immediately fetch data (default Zagreb if no city provided) and to infer the city from conversation context instead of asking the user. That is coherent for an auto-serving weather skill but has a privacy/behavior implication: the agent may fetch data about an inferred location without explicit user confirmation. It does not instruct reading system files, environment variables, or contacting unexpected endpoints beyond the listed meteorological sites. It suggests optional tools (xmllint, xq) for parsing but does not require them.
Install Mechanism
No install spec or downloadable code — instruction-only. This minimizes disk footprint and supply-chain risk.
Credentials
No environment variables, secrets, or credentials requested. The skill does not ask for unrelated tokens or keys.
Persistence & Privilege
always:false and default model-invocation allowed. The skill does not request permanent system presence or modify other skills. Note: allowing autonomous invocation means the agent can call the listed network endpoints when invoked without further user prompts — this is expected for such a skill.
Assessment
This is an instruction-only weather skill that fetches public XML feeds from official Croatian meteorological sites using curl — no credentials or installs are required. Before installing, consider: (1) privacy: the skill is written to infer a city from conversation context and 'just fetch' results (or default to Zagreb) rather than asking the user, so it may retrieve data tied to an inferred location without explicit confirmation; (2) parsing: it recommends xmllint/xq for nicer output but won't install them for you; (3) network access: the agent will make outbound HTTP requests to vrijeme.hr, prognoza.hr, meteo.hr, klima.hr, and hidro.hr — verify you trust those domains and your environment's policy for outbound requests; (4) if you prefer confirmation before queries, provide explicit city arguments when calling the skill or disable autonomous invocation in your agent if that's an option. Overall the skill appears coherent and appropriate for its stated purpose.Like a lobster shell, security has layers — review code before you run it.
latestvk97daqx091p6408vr8mf3zaa0n80gv9c
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🇭🇷 Clawdis
Binscurl