MH weather
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
NoteHigh Confidence
ASI02: Tool Misuse and ExploitationWhat this means
Weather queries may disclose the city, region, or airport code the user asks about to wttr.in.
Why it was flagged
The skill instructs the agent to use curl to query an external weather endpoint. This is directly aligned with the weather-lookup purpose, but users should understand that their requested location is sent to the provider.
Skill content
curl "wttr.in/London?format=3"
Recommendation
Use the skill for non-sensitive weather lookups, and prefer explicit HTTPS URLs if adapting the commands manually.