Security audit
Weather Search
Security checks for vulnerabilities and agentic risk
Overview
This skill is a straightforward weather lookup tool that uses a user-provided Amap API key to request weather data.
Install only if you are comfortable providing an Amap API key and sending requested city or coordinate weather queries to Amap. Keep the API key scoped where possible, and avoid exposing it in shared shells, logs, or command histories.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.