Information Services

Unified information services hub combining location, weather, and time capabilities. Multi-source geolocation (GPS/IP/WiFi), fixed-point weather forecasts, a...

Security Scan

The skill's stated purpose (location, weather, time) matches the instructions, but there are inconsistencies and missing implementation details that could cause unexpected behavior or failures — review before use.

Purpose & Capability

The skill's name and description align with the requested capabilities (GPS/system/IP/WiFi-based location, weather lookups, NTP/web time). Optional API keys listed (Google geolocation, MLS, Unwired) are appropriate for enhanced geolocation. However, the documentation shows a command interface (python scripts/locate.py) and other runtime scripts that are not present in the bundle — an instruction-only skill is assuming code or binaries exist in the runtime environment, which is an incoherence to be aware of.

Instruction Scope

Runtime instructions ask the agent to access system/hardware sources (GPS, OS location services, WiFi, cellular), query external endpoints (wttr.in, open-meteo, pool.ntp.org, web time APIs), and 'log the failure' with attempted sources. These actions are within the stated purpose, but the skill also claims 'no persistent storage' while instructing to record attempts (ambiguous). The skill does not instruct reading unrelated files or credentials, nor to send data to unexpected endpoints beyond the listed public APIs.

Install Mechanism

There is no install spec (instruction-only), so nothing will be written to disk or fetched as part of an installer. This minimizes installation risk. The trade-off: the skill assumes runtime support (scripts/binaries/APIs) that are not included.

Credentials

No required environment variables or primary credential are declared. The optional API keys mentioned for enhanced geolocation are proportional and relevant. There are no unrelated credentials requested.

Persistence & Privilege

The skill does not request persistent presence (always:false). It states a policy of 'No persistent storage of location data', which is appropriate, but other instructions ask to 'log the failure' and 'record which sources were attempted' without clarifying storage location or retention — this is inconsistent and should be clarified before trusting the skill with sensitive location data.

What to consider before installing

This skill appears to do what it says (location, weather, time), but there are a few red flags to consider before installing/using: - Missing implementation: The SKILL.md and references show command examples (e.g., python scripts/locate.py) but the bundle contains no executable scripts. The skill assumes runtime code/binaries that may not exist, so it may fail or cause the agent to attempt unsupported operations. - Local resource access: The skill's instructions require access to OS/hardware location services (GPS, WiFi, cellular, system location). Make sure your agent runtime actually has permission and a secure policy for exposing that data. If you run the agent in a cloud environment, these methods won't work and may fall back to IP geolocation. - Network calls: The skill will query external services (wttr.in, open-meteo, pool.ntp.org, worldtimeapi). If you have network egress controls, expect those endpoints to be contacted. Review and whitelist only the needed endpoints if necessary. - Logging vs storage ambiguity: The skill says it will not persist location data, but also asks to 'log' which sources were attempted. Ask the publisher where logs are written and how long they are retained before trusting with sensitive inputs. - Optional API keys: Only provide optional geolocation API keys (GOOGLE_GEOLOCATION_API_KEY, MLS_API_KEY, UNWIRED_API_KEY) if you trust the skill and want improved accuracy. They are not required for basic operation. Recommendations: Request the missing implementation (scripts or a clear runtime implementation plan), clarify logging/storage behavior, test in a controlled environment, and restrict which endpoints and local sensors the agent can access. If these clarifications are not available, treat the skill as untrusted for sensitive location data.

Information Services v1.0.0

Index & Quick Reference. Full specifications in references/.

Quick Reference

Role

Unified hub for location, weather, and time services. Routes requests to the appropriate subsystem based on service type.

Department

Information

Section Index

• Location Service
• Weather Service
• Time Service
• Coordination Logic

Services

Service	Capabilities	Source Skills
Location	GPS, system, IP, WiFi, cellular triangulation	multi-source-locate
Weather	Current conditions, forecast, multi-source fusion	locate-weather
Time	System clock, NTP, web API, confidence scoring	multi-source-time

Prompts

• 01-implement-method.md
• 02-robustness-checks.md
• 03-test-cases.md
• 04-documentation.md
• 05-workflow-execution.md

---

See references/ for detailed service specifications.