Pollen rapporten

PassAudited by ClawScan on May 1, 2026.

Overview

This is a scoped pollen-forecast helper that reads a bundled Swedish region list and calls the disclosed Pollenrapporten API, with no suspicious behavior evident.

This skill appears safe for its stated purpose. Before installing, note that it runs a Python script and contacts the public Pollenrapporten API to retrieve forecast data for the requested region.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Info

#ASI02: Tool Misuse and Exploitation

What this means

Using the skill sends forecast requests for the selected Swedish region to the Pollenrapporten API; no credentials or unrelated local data are shown being sent.

Why it was flagged

The skill uses a local Python helper to make outbound API requests to the declared pollen forecast service.

Skill content

API_BASE = "https://api.pollenrapporten.se/v1" ... urllib.request.urlopen(req, timeout=15)

Recommendation

Install only if you are comfortable with the skill making public pollen forecast API calls when used.

Info

#ASI04: Agentic Supply Chain Vulnerabilities

What this means

The skill may fail if Python is unavailable, and the dependency is less explicit than ideal.

Why it was flagged

The documented usage depends on Python even though the registry requirements list no required binaries; this is a minor metadata completeness issue, not evidence of unsafe installation behavior.

Skill content

python3 $OPENCLAW_HOME/workspace/skills/pollen-forecast/scripts/get_forecast.py <city-name>

Recommendation

Confirm Python 3 is available before using the skill; no extra packages or install-time downloads are indicated.