Weather Query

• Analyzed: May 11, 2026, 4:48 AM
• Findings: 1
• Version: 0.1.0
• Hash: 27ff82dd68b15f3b2ecc34861740fb290b500646d14bf940403cbdb43ddfce5a
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw AgentSkills bundle 'weather-query' is classified as benign. The `SKILL.md` provides clear, non-malicious instructions to the AI agent for querying weather information, focusing on output formatting and token optimization. The `scripts/forecast.sh` and `scripts/realtime.sh` shell scripts correctly sanitize user input for the `query` parameter using `curl --data-urlencode`, effectively preventing shell injection vulnerabilities. All parameters are validated with regex, and the scripts make legitimate API calls to `https://60s.viki.moe/v2/weather` and `https://60s.viki.moe/v2/weather/forecast` for their stated purpose, with no evidence of data exfiltration, malicious execution, persistence mechanisms, or obfuscation.