Security audit

Weather Search

Security checks for vulnerabilities and agentic risk

Overview

This skill is a straightforward Amap weather lookup helper with some privacy and API-key handling caveats, but no evidence of hidden or destructive behavior.

Install only if you are comfortable using Amap for weather lookups and sharing queried city or coordinate data with Amap. Use a restricted, low-quota AMAP_API_KEY where possible, avoid precise coordinates unless needed, and rotate the key if process logs or monitoring systems may capture command-line arguments.

A.I.G

Vulnerability Patterns

Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (1)

T09 · Insecure Skill Coding Practices

Note

Location: weather.sh:25
Finding: Amap API Key Exposed Through Process Command-Line Arguments
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (3)

External Script Fetching

High

Category: Supply Chain
Confidence: 90% confidence
Finding: Remote code is downloaded and executed. This bypasses code review and could introduce malicious code.
Content: Scanner excerpt · SKILL.md (reported line 32)May include surrounding context.
Query Weather by City Name

bash
curl -X GET "https://restapi.amap.com/v3/weather/weatherInfo?city=BEIJING&key=YOUR_API_KEY&output=json"

Query Weather by City Code

Undeclared Tool Scope

Medium

Category: MCP Least Privilege
Confidence: 94% confidence
Finding: The skill includes executable shell examples and a quick-start script but does not declare any explicit tool scope or allowed tools. In agent environments, missing tool restrictions can allow broader-than-intended shell access, increasing the chance of command execution beyond the narrow weather lookup use case.
Content: No source excerpt is available for this finding.

Missing User Warnings

Low

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The skill sends user-supplied city names or coordinates to Amap but does not clearly disclose that this data is transmitted to a third-party service. This creates a privacy and transparency issue, especially for precise location data, even though the transmitted data is limited to weather-query parameters.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.