MarsAI Weather Forecast

Get current weather and forecasts (no API key required).

Security Scan

The skill is an instruction-only weather helper that only calls public no-key endpoints (wttr.in and Open‑Meteo) via curl; its requirements and instructions match its stated purpose.

Purpose & Capability

Name/description (weather, no API key) match the instructions and required binaries. The only required binary is curl, which is exactly what the SKILL.md uses. One minor provenance inconsistency: the _meta.json ownerId differs from the registry ownerId in the provided metadata — this affects provenance but not the skill's functionality.

Instruction Scope

SKILL.md contains only curl examples against wttr.in and Open‑Meteo and formatting tips. Commands are limited to fetching weather data (including an example writing a PNG to /tmp). The instructions do not request unrelated files, credentials, or arbitrary system access.

Install Mechanism

No install spec and no code files — instruction-only skill. This is low-risk because nothing is downloaded or written by an installer.

Credentials

The skill requires no environment variables, secrets, or config paths. That is proportional to a simple HTTP-based weather query service.

Persistence & Privilege

Defaults are used (always: false, model invocation enabled). The skill does not request persistent presence or elevated privileges and does not modify other skills or system settings.

Assessment

This skill is coherent and low-risk: it only uses curl to fetch data from wttr.in and Open‑Meteo (both public, no-key services). Be aware that using it causes network requests to those third parties and (if you run the PNG example) will write a file to /tmp. If provenance matters to you, note the small ownerId mismatch between the registry metadata and the _meta.json — that suggests the package metadata should be verified before trusting the publisher, but it does not change the skill's behavior.

Weather

Two free services, no API keys needed.

wttr.in (primary)

Quick one-liner:

curl -s "wttr.in/London?format=3"
# Output: London: ⛅️ +8°C

Compact format:

curl -s "wttr.in/London?format=%l:+%c+%t+%h+%w"
# Output: London: ⛅️ +8°C 71% ↙5km/h

Full forecast:

curl -s "wttr.in/London?T"

Format codes: %c condition · %t temp · %h humidity · %w wind · %l location · %m moon

Tips:

• URL-encode spaces: wttr.in/New+York
• Airport codes: wttr.in/JFK
• Units: ?m (metric) ?u (USCS)
• Today only: ?1 · Current only: ?0
• PNG: curl -s "wttr.in/Berlin.png" -o /tmp/weather.png

Open-Meteo (fallback, JSON)

Free, no key, good for programmatic use:

curl -s "https://api.open-meteo.com/v1/forecast?latitude=51.5&longitude=-0.12&current_weather=true"

Find coordinates for a city, then query. Returns JSON with temp, windspeed, weathercode.

Docs: https://open-meteo.com/en/docs