ClawHub

OpenWeather

v1.0.2

Get current weather, hourly forecasts, and 8-day daily forecasts for any location worldwide using OpenWeather One Call API 3.0. Use when the user asks about...

⭐ 0· 394·1 current·1 all-time
byJoshua Ensley@joshua-ensley
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (OpenWeather forecasts) match the included Python CLI and README. Required binary (python3) and primary env var (OPENWEATHER_API_KEY) are exactly what this purpose needs.
✓
Instruction Scope
SKILL.md and the CLI limit behavior to resolving a location and calling OpenWeather geocoding + onecall endpoints. Rules explicitly limit calls (<=2 per request) and require asking for location if none is configured. No instructions to read unrelated files, system config, or transmit data to unknown endpoints.
✓
Install Mechanism
No install spec (instruction-only) and included Python script uses only the standard library. Nothing is downloaded from external URLs or written to arbitrary locations during install.
✓
Credentials
Only OPENWEATHER_API_KEY is required (primaryEnv). Optional env vars (OPENWEATHER_UNITS, OPENWEATHER_DEFAULT_LOCATION) are appropriate for a weather skill. The code only reads these env vars and no other secrets or config paths.
✓
Persistence & Privilege
The skill is not forced-always, does not request persistent system privileges, and does not modify other skills' configs. Autonomous invocation is allowed by default (normal) but the skill itself has limited scope.
Assessment
This skill appears coherent and limited to calling OpenWeather endpoints. Before installing: ensure you trust the owner (homepage/source is not provided), and only provide an API key that has the One Call 3.0 product enabled. Be aware of OpenWeather rate limits and billing for your key. The script restricts network requests to OpenWeather domains and does not persist data, but treat the API key as sensitive — don't reuse a high-privilege key you use elsewhere. If you need higher assurance, verify the skill's origin (repository or publisher) or run the included script in an isolated environment first.

Like a lobster shell, security has layers — review code before you run it.

latestvk970rzv84r5qqajzfx4wsf3y4n821wsb

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🌤️ Clawdis
Binspython3
EnvOPENWEATHER_API_KEY
Primary envOPENWEATHER_API_KEY

Comments