MH weather
PassAudited by VirusTotal on May 11, 2026.
Overview
Type: OpenClaw Skill Name: mh-weather Version: 1.0.0 The skill bundle is benign. It clearly defines its purpose as fetching weather information using `curl` from the legitimate `wttr.in` service. All commands provided in `SKILL.md` are simple `curl` requests to this domain, without any evidence of data exfiltration, malicious execution, persistence, obfuscation, or prompt injection attempts against the AI agent. The content is well-aligned with its stated function and lacks any high-risk behaviors.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Weather queries may disclose the city, region, or airport code the user asks about to wttr.in.
The skill instructs the agent to use curl to query an external weather endpoint. This is directly aligned with the weather-lookup purpose, but users should understand that their requested location is sent to the provider.
curl "wttr.in/London?format=3"
Use the skill for non-sensitive weather lookups, and prefer explicit HTTPS URLs if adapting the commands manually.