DHMZ Weather
PassAudited by ClawScan on May 1, 2026.
Overview
This instruction-only weather skill appears benign and only fetches public Croatian weather data using curl.
This skill looks safe for its stated purpose. Before installing, note that it will use curl to contact public DHMZ-related weather sites and that optional parsing examples mention tools like xmllint or xq, but no credentials or background services are required.
Findings (1)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Using the skill may cause your agent to make network requests to Croatian public weather websites to retrieve XML weather data.
The skill instructs the agent to use curl for outbound requests to public weather XML endpoints; this is disclosed and central to the weather lookup purpose.
curl -s "https://vrijeme.hr/hrvatska_n.xml"
Use the skill if you are comfortable with outbound requests to the listed weather domains; no API key or personal credential is required.