Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

数联互通weather

v1.0.0

Get current weather and forecasts via WeatherAPI.com. Use when: user asks about weather, temperature, or forecasts for any location. IMPORTANT: You must conf...

1· 278·0 current·0 all-time
byPILAO@jianmo1997
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description, required binary (curl), and primaryEnv (WEATHER_API_KEY) all match the declared purpose of calling WeatherAPI.com. No unrelated services, credentials, or binaries are requested.
Instruction Scope
SKILL.md only instructs how to provide an API key and shows curl commands to WeatherAPI endpoints. It refers to user-facing OpenClaw config files and logs (~/.openclaw/*) for setup/troubleshooting, which is reasonable and within scope.
Install Mechanism
Instruction-only skill with no install spec and no code to install—lowest install risk. It does require curl to be present, which is documented in metadata.
Credentials
Only the WEATHER_API_KEY is required (declared as primaryEnv) and the SKILL.md uses that same variable and an optional config-file apiKey entry. There are no extraneous SECRET/TOKEN/PASSWORD env vars requested.
Persistence & Privilege
Skill is not always-enabled and does not request elevated or cross-skill configuration changes. It asks the user to edit the skill's own OpenClaw config or set an env var—normal behavior.
Assessment
This skill appears coherent and low-risk: it simply issues HTTPS requests to api.weatherapi.com using your WEATHER_API_KEY via curl. Before installing, (1) ensure you obtain the API key from the official WeatherAPI site and store it securely (avoid adding long-lived keys to shared shell rc files if the machine is multi-user), (2) confirm you’re comfortable with outbound requests to WeatherAPI (requests include the location strings you query), and (3) verify curl is an acceptable dependency on your system. Because this is instruction-only (no code bundled), the main risk is accidental leakage of the API key—prefer configuring it in the OpenClaw UI or a secure secret store rather than a world-readable file.

Like a lobster shell, security has layers — review code before you run it.

latestvk972zqsn9wh73bjwffzhx00gdn82075k

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

🌦️ Clawdis
Binscurl
Primary envWEATHER_API_KEY

SKILL.md

WeatherAPI.com Skill

Get current weather conditions and forecasts using WeatherAPI.com.

⚠️ IMPORTANT: Configure Your API Key First

This skill will NOT work until you configure your own API key.

Where to Get API Key

  1. Visit WeatherAPI.com
  2. Sign up for a free account
  3. Copy your API key from the dashboard
  4. Configure it using one of the methods below

Free tier: 1,000,000 calls/month

Configuration

Option 1: OpenClaw UI (Recommended)

  1. Open OpenClaw Control UI: http://127.0.0.1:18789
  2. Go to Skills section
  3. Find shulian-weather skill
  4. Click Configure button
  5. Enter your API key
  6. Save

Option 2: Config File

Edit ~/.openclaw/openclaw.json:

{
  "skills": {
    "entries": {
      "shulian-weather": {
        "enabled": true,
        "apiKey": "YOUR-API-KEY-HERE"
      }
    }
  }
}

Option 3: Environment Variable

Add to ~/.zshrc:

export WEATHER_API_KEY="YOUR-API-KEY-HERE"

Then restart Gateway.

Usage

After configuring your API key, you can ask:

  • "What's the weather in Shanghai?"
  • "Will it rain in Beijing tomorrow?"
  • "Weather forecast for New York this week"

Commands

Current Weather

API_KEY="${WEATHER_API_KEY}"
curl -s "https://api.weatherapi.com/v1/current.json?key=${API_KEY}&q=London"

Forecast

API_KEY="${WEATHER_API_KEY}"
curl -s "https://api.weatherapi.com/v1/forecast.json?key=${API_KEY}&q=London&days=7"

Search

API_KEY="${WEATHER_API_KEY}"
curl -s "https://api.weatherapi.com/v1/search.json?key=${API_KEY}&q=London"

Troubleshooting

"API key not configured" error

  1. Make sure you've configured your API key in OpenClaw UI or config
  2. Restart Gateway after configuration
  3. Check logs: tail -f ~/.openclaw/logs/gateway.log

Verify configuration

cat ~/.openclaw/openclaw.json | jq '.skills.entries."shulian-weather"'

Notes

  • API key is required - no default key provided
  • Supports worldwide locations
  • Returns JSON format
  • Free tier: 1,000,000 calls/month

Files

1 total
Select a file
Select a file to preview.

Comments

Loading comments…