Weather Daily
v1.0.0每日天气推送 Skill — 早晨推送今日天气（温度/穿衣/出行建议），晚间推送明日预告， 支持一周预报、极端天气预警、空气质量监测。基于城市设置，无需 API Key， 通过 WebSearch 实时获取天气数据。 触发词：今天天气、天气预报、明天天气、本周天气、穿衣建议、下雨吗、天气怎么样、 开启推送、空气质...
⭐ 0· 79·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (daily weather push, weekly/monthly reports, alerts) match the included scripts and declared behavior. All required functionality (registration, push toggles, cron entries, prompt-generation for forecasts) is implemented locally in the scripts; nothing requested is disproportionate to a weather-push skill.
Instruction Scope
SKILL.md and scripts instruct the agent to generate text prompts to be fulfilled via WebSearch/LLM and to run local scripts. The scripts only read/write user profiles under data/users/<userId>.json and print special cron control tokens; they do not read unrelated system files or environment variables, nor do they call external URLs themselves. The described use of WebSearch/Claude is consistent with the prompt-generation approach implemented.
Install Mechanism
No install specification is present (instruction-only with shipped scripts). No external downloads or package installs are requested by the skill.
Credentials
The skill requests no environment variables, credentials, or sensitive config paths. It stores only user preferences (city, units, times, channel) under data/users and explicitly documents that weather content is not persisted.
Persistence & Privilege
The skill emits platform-specific markers (__OPENCLAW_CRON_ADD__/__OPENCLAW_CRON_RM__) to request scheduling of cron jobs and constructs a sessionKey that routes messages to platform channels (telegram/feishu/slack/discord). That is expected for a push scheduler, but installing it will cause the platform to register recurring jobs that autonomously invoke its scripts and send outgoing messages via the platform's channel integrations.
Assessment
This skill appears coherent and implements everything it claims: it creates per-user JSON profiles under data/users/<userId>.json, prints special __OPENCLAW_CRON_ADD__/__OPENCLAW_CRON_RM__ lines that the platform will use to schedule recurring jobs, and relies on the platform's LLM + WebSearch to fetch/compose weather text. Before enabling for real users: (1) verify your platform's cron/agent system and channel integrations are trusted — the skill will request scheduled, autonomous pushes to channels (Telegram/Slack/Feishu/Discord) using the platform's credentials; (2) inspect or restrict the data/users directory if you have privacy requirements (profiles contain city/time/channel but no weather history by design); (3) be aware the skill depends on WebSearch/LLM results (may be inaccurate) and that scheduling is executed by the host environment; and (4) note the package has no homepage/author verification in the registry metadata — review the source you received if provenance matters.Like a lobster shell, security has layers — review code before you run it.
latestvk97bs3tqcr9t8gyq8rtjbffb4983zejk
License
MIT-0
Free to use, modify, and redistribute. No attribution required.