Weather

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The city or coordinates you ask about may be visible to weather API providers.

Why it was flagged

The skill sends the requested location to an external weather API; this is expected for weather lookup, but it is still a third-party data flow.

Skill content
const url = `${this.base}/${encodeURIComponent(location)}?format=${format}`; const res = await fetch(url);
Recommendation

Use general city names instead of precise private coordinates if you are sensitive about location privacy.

What this means

Installation or execution may depend on runtime details not fully captured by the registry requirements.

Why it was flagged

The package also includes runnable JavaScript files and documentation comments referencing npm/node usage, so the runtime expectations are not fully reflected in the install metadata.

Skill content
No install spec — this is an instruction-only skill.
Recommendation

Before installing, verify how the skill will be invoked and whether any Node/package dependencies are required in your environment.