Weather NWS
PassAudited by ClawScan on May 1, 2026.
Overview
The skill’s weather-related network access and optional AirNow API key are disclosed and fit its stated purpose.
Before installing, be aware that weather lookups will contact external services using the location you provide, and AQI requests may use your optional AirNow API key. The disclosed behavior is consistent with a weather forecast skill.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A location you ask about may be sent to geocoding and weather providers to retrieve forecasts.
Weather queries necessarily send the requested location to external services. This is disclosed and directly aligned with the skill’s purpose.
The script handles: 1. Geocoding location to lat/long 2. Detecting if location is in US 3. Calling NWS API for US locations ... 4. Falling back to wttr.in for non-US
Use the skill for locations you are comfortable sharing with public weather/geocoding services.
If configured, the skill may use your AirNow API key when AQI data is requested.
The skill can use an optional third-party API key for AirNow AQI data. This credential use is disclosed and purpose-aligned.
Env var declarations: AIRNOW_API_KEY (optional) - AirNow API Key for AQI lookup
Provide only an AirNow key intended for this use, and avoid sharing broader or unrelated credentials.