weather-agent
WarnAudited by ClawScan on May 10, 2026.
Overview
Review recommended: the skill is transparent about its purpose, but it can use your Simmer API key to place recurring real-money trades without approving each trade.
Install only if you intentionally want an autonomous financial trading bot. Keep autostart off during setup, inspect the full source, run dry/manual tests, use a no-withdrawal trading-only API key, start with a small balance, and monitor or disable scheduled runs when not actively using it.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If enabled or run live, the skill could spend funds and create losing positions without asking before each trade.
The skill intentionally executes real-money financial actions without individual trade approval. This is disclosed and aligned with the purpose, but it is high-impact and requires careful review.
Financial Risk: Can deploy $30-60/day (max $100/day with quality filter) - No Per-Trade Review: Trades execute automatically without approval
Run dry/manual tests first, keep autostart disabled until you are ready, lower trade limits if needed, and use only funds you are prepared to risk.
A mis-scoped or exposed API key could allow trading actions on the user's account, and possibly more if withdrawal or account permissions are granted.
The skill needs a credential with portfolio-read and trade-placement authority. The requested authority is purpose-aligned and the documentation recommends least privilege.
Required: - `SIMMER_API_KEY` ... Your `SIMMER_API_KEY` should have: - Read portfolio (required) - Read positions (required) - Place trades (required) - NO withdrawal permissions
Use a dedicated trading-only key with no withdrawal or account-modification rights, store it securely in the .env file, and rotate it after testing.
After enabling autostart, the skill may continue making trading decisions every six hours until the user disables it.
The schedule and autostart setting show recurring autonomous behavior. It is disclosed and disabled by default, but it can persist once enabled.
metadata: {"clawdbot":{"emoji":"🌡️","requires":{"env":["SIMMER_API_KEY"]},"cron":"0 */6 * * *","autostart":false}}
...
Autonomous Behavior: Runs every 6 hours when manually enabledEnable scheduled trading only intentionally, monitor the account, and disable autostart when you no longer want autonomous trades.
If the optional package is installed, trade details may be logged according to that package's behavior.
The code will use an optional third-party tradejournal package if it is present in the environment. The SKILL.md and requirements warn that it is optional, but its behavior is outside the provided core files.
try:
from tradejournal import log_trade
JOURNAL_AVAILABLE = True
except ImportError:Leave tradejournal uninstalled unless needed, and inspect or pin its source before enabling trade logging.