Back to skill
v1.0.0
撒大大撒
BenignClawScan verdict for this skill. Analyzed May 1, 2026, 7:59 AM.
Analysis
The skill is security-benign and instruction-only, but it appears to return simulated weather data despite being described as real-time weather.
GuidanceThis skill does not appear to pose a security risk, but treat its weather results as demo or simulated information unless the publisher updates it to use a real weather source and clearly labels that behavior.
Findings (1)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Abnormal behavior control
Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.
Human-Agent Trust Exploitation
SeverityLowConfidenceHighStatusNote
SKILL.md
description: 极简的城市实时天气查询技能... 无需API Key，模拟返回天气数据（可替换为真实接口）。
The skill is described as real-time weather lookup, but the body says it returns simulated weather data. This is disclosed in the artifact, but users should notice that answers may not be live or accurate.
User impactA user could mistake canned sample weather for real current conditions.
RecommendationMake the user-facing description clearly say this is a simulated/demo weather skill, or add a real, disclosed weather API integration if live data is intended.