ClawHub

Weather Pro

v1.4.0

Get weather, air quality, sunrise/sunset, golden/blue hour times, and sunrise/sunset glow quality forecasts (朝霞晚霞预测). Perfect for photographers and outdoor p...

⭐ 0· 137·1 current·1 all-time
by@pazzilivo
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the behavior: the script fetches weather from WeatherAPI and sunrise/sunset/quality data from Sunsethue. Declared required binaries (curl, jq) are exactly what's used.
ℹ
Instruction Scope
SKILL.md and the script instruct the agent to source ~/.openclaw/.env and then call external weather and sunsethue APIs. Sourcing ~/.openclaw/.env is expected to obtain WEATHERAPI_KEY and SUNSETHUE_KEY, but it will also load any other env vars in that file — this could unintentionally expose unrelated secrets if present.
✓
Install Mechanism
Instruction-only skill with an included shell script. No install spec, no downloads or archive extraction, and no third-party packages are fetched at install time.
ℹ
Credentials
No required credentials are declared; two optional env vars (WEATHERAPI_KEY, SUNSETHUE_KEY) are used which is proportional. However, the script sources ~/.openclaw/.env to obtain them, which may load other unrelated secrets stored there.
✓
Persistence & Privilege
Does not request always:true, does not modify other skills or system-wide settings, and has no elevated persistence or privileges.
Assessment
This skill appears to do exactly what it says: call WeatherAPI and Sunsethue to produce weather and glow-quality forecasts. Before installing, check your ~/.openclaw/.env file: the script sources it to get optional API keys, so if that file contains other secrets you don't want loaded, remove them or create a dedicated env file with only WEATHERAPI_KEY and SUNSETHUE_KEY. If you don't have keys, the script may fail or return limited results. Review the included scripts (scripts/weather-full.sh) yourself and only provide the two optional API keys to minimize exposure.

Like a lobster shell, security has layers — review code before you run it.

latestvk971rf159c6r74js9w7r66xavd838c5m

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

☔ Clawdis
Binscurl, jq

Comments