Back to skill

Security audit

Mars Weather Pro

Security checks for vulnerabilities and agentic risk

Overview

This is a simple weather lookup skill that only provides curl examples for public weather services.

Safe for ordinary weather lookups. Be aware that locations or coordinates you request are shared with wttr.in or Open-Meteo, and prefer explicit HTTPS URLs when using the wttr.in examples.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.