天气查询测试技能
PassAudited by VirusTotal on May 11, 2026.
Overview
Type: OpenClaw Skill Name: weather-test-00232417 Version: 1.0.1 The skill is a straightforward weather query tool that functions as described in SKILL.md. It uses the legitimate and well-known 'wttr.in' API to fetch weather data based on a hardcoded list of cities in main.py. There is no evidence of data exfiltration, unauthorized execution, or prompt injection attempts.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The queried city may be visible to the external weather service or network path, and the returned weather information could be modified in transit; no broader personal data is shown as being sent.
The code limits city extraction to a fixed list, then sends that city to wttr.in over plain HTTP for weather data. This matches the stated purpose, but users should know the query leaves the platform and is not sent over HTTPS.
cities = ["北京", "上海", "广州", "深圳", "杭州", "成都", "重庆"] ... url = f"http://wttr.in/{city}?format=j1"Use this only for nonsensitive weather lookups; the maintainer should prefer HTTPS and declare the external network dependency clearly in metadata.