Weather Query

Security checks across malware telemetry and agentic risk

Overview

This is a narrow China weather lookup skill that runs small local curl scripts and sends location queries to a weather API, with no evidence of hidden, destructive, persistent, or credential-seeking behavior.

Install this only if you are comfortable with your weather location queries being sent to the 60s.viki.moe service and with the agent invoking the included bash/curl scripts. Avoid putting sensitive personal details into the location field.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Lp3

Medium

Category: MCP Least Privilege
Confidence: 89% confidence
Finding: The skill instructs the agent to run local shell scripts (`./scripts/realtime.sh` and `./scripts/forecast.sh`) but does not declare any corresponding shell or execution permissions. This creates a capability/permission mismatch that can bypass governance expectations, reduce operator visibility, and increase risk if the scripts later gain unsafe behavior or process untrusted input.

Missing User Warnings

Medium

Confidence: 92% confidence
Finding: The script transmits user-supplied location/weather queries to a third-party endpoint without any user-facing notice, consent flow, or local/offline alternative. Even though the request is properly URL-encoded and does not show command injection, the privacy issue is real because user queries may contain sensitive location or travel information and are sent off-platform to an external service.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal