Security audit

和风天气查询功能

Security checks across malware telemetry and agentic risk

Overview

This is a weather lookup skill with some under-disclosed provider and credential-handling details, but the artifacts do not show theft, destructive behavior, or unrelated hidden capabilities.

Install only if you are comfortable configuring QWeather credentials locally and sending requested locations to external weather services. Treat the Open-Meteo fallback as an under-disclosed secondary provider, avoid sharing logs from the JWT helper, and replace the placeholder config/key material with your own local secrets.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (3)

Description-Behavior Mismatch

Medium

Confidence: 95% confidence
Finding: The code silently falls back from the declared QWeather provider to Open-Meteo when location resolution or weather retrieval fails, changing the external party that receives user-supplied location data and changing trust, privacy, and data-governance assumptions. Because this happens automatically and without any indication in this file that the provider changed, users or integrators may believe requests only go to QWeather when they may also be sent elsewhere.

Missing User Warnings

Medium

Confidence: 96% confidence
Finding: The script prints a freshly generated bearer JWT directly to stdout, which can expose usable credentials through terminal history, CI/CD logs, shell capture, remote session recording, or support screenshots. In this skill context, the token is intended for authenticating against the weather provider, so leaking it can enable unauthorized API use during its validity window and may normalize unsafe handling of secrets.

Missing User Warnings

Low

Confidence: 89% confidence
Finding: On lookup failure, the skill may send the user's location to a second external service, Open-Meteo, without any visible disclosure or consent gate in this file. While this does not appear malicious, it creates an undisclosed data-sharing path and weakens privacy expectations established by the skill description.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.env_credential_access

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: lib/weather_now_free.js:9

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: lib/weather_now_openmeteo.js:9