Weather Like Test

• Analyzed: May 12, 2026, 3:56 AM
• Findings: 1
• Version: 0.1.0
• Hash: c01a500c388c5dd1b9491c1b859bdd045821f547b0dc5a179aeed6c745eb6e33
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is benign. It uses `curl` to fetch weather data from legitimate, public APIs (`wttr.in` and `api.open-meteo.com`), as explicitly stated in `SKILL.md`. The instructions are clear, do not attempt prompt injection, and the only file system interaction is writing a temporary image to `/tmp/weather.png`, which is a standard and non-sensitive operation. There is no evidence of data exfiltration, malicious execution, persistence, or obfuscation.