中国城市天气Weather In China

PassAudited by ClawScan on May 1, 2026.

Overview

This appears to be a straightforward China weather lookup skill that fetches weather.com.cn data, with no evidence of hidden, destructive, or credential-related behavior.

This skill looks safe for ordinary weather lookup. Before installing, confirm you are comfortable with it contacting weather.com.cn for city weather data and with using the local Python requests package. The optional shell alias is only needed if you want a shortcut.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

When used, the selected city code is sent to weather.com.cn and the result depends on that website's returned HTML.

Why it was flagged

The script performs an external network request to retrieve weather data. This is disclosed and central to the skill's purpose.

Skill content
url = f"https://www.weather.com.cn/weather/{city_code}.shtml" ... response = requests.get(url, headers=headers, timeout=10)
Recommendation

Use it when you are comfortable querying weather.com.cn for the requested city, and treat weather output as advisory rather than safety-critical.

What this means

If requests is missing or installed from an untrusted source, the skill may fail or inherit dependency risk from the local Python environment.

Why it was flagged

The skill relies on the external Python package requests without a pinned version. This is common and purpose-aligned, but it is still a dependency users should obtain from a trusted Python environment.

Skill content
metadata: { "openclaw": { "emoji": "🌤️", "requires": { "bins": ["python"], "pip": ["requests"] } } }
Recommendation

Use a trusted Python environment or package manager for requests; no extra credentials are needed.