Weather Data API
v1.0.0Provides weather forecast data from NOAA. Free tier returns 3-day forecast, premium tier returns 7-day with hourly data.
⭐ 0· 476·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The description says it provides NOAA data, but the SKILL.md instructs callers to curl http://localhost:5000 endpoints. There is no install or code to start such a service, no mention of calling NOAA APIs, and no homepage/source to verify. This mismatch means the skill cannot deliver the advertised capability as-is or relies on an out-of-band local service not described.
Instruction Scope
Runtime instructions only show curl commands against localhost and require an 'X-Payment' header for premium access (0.05 USDC) without specifying how to obtain or validate that header. The skill does not declare any environment variables or steps to run a local server, so the instructions are incomplete and could prompt users to supply sensitive payment tokens or credentials out-of-band.
Install Mechanism
There is no install spec and no code files (instruction-only), which is low-risk from an installation perspective. However, relying on a pre-existing local service is unusual and underdocumented.
Credentials
The skill declares no required environment variables or credentials, yet its premium flow expects an X-Payment header (effectively a secret/token) not declared anywhere. This gap can lead to ad-hoc requests for sensitive payment headers or tokens without a clear, justified mechanism.
Persistence & Privilege
The skill does not request always:true or any elevated persistence. It is user-invocable and does not claim any system-wide modifications.
What to consider before installing
Do not provide any secret tokens, private keys, or payment headers to this skill right now. The SKILL.md expects a local service at localhost:5000 but offers no instructions to install or run that service, and the premium 'X-Payment' header is unexplained. Before installing or using: (1) ask the publisher for the service implementation and how the payment header is obtained/validated; (2) verify the source or homepage and prefer skills that call NOAA's public APIs directly; (3) test calls to localhost in a safe sandbox — if curl to localhost:5000 fails, the skill is unusable as provided; (4) never paste secret tokens into a skill prompt unless you trust the maintainer and understand where the token goes.Like a lobster shell, security has layers — review code before you run it.
apivk970y5hepwmxvzazetdvrsj7ad81q36jforecastvk970y5hepwmxvzazetdvrsj7ad81q36jlatestvk970y5hepwmxvzazetdvrsj7ad81q36jnoaavk970y5hepwmxvzazetdvrsj7ad81q36jweathervk970y5hepwmxvzazetdvrsj7ad81q36j
License
MIT-0
Free to use, modify, and redistribute. No attribution required.