ClawHub

OpenWeatherMap Weather

v1.0.1

Get current weather data, forecasts, and weather information from OpenWeatherMap API. Use when the user asks about weather, temperature, forecasts, or any we...

⭐ 0· 136·1 current·1 all-time
byPhil Lawlor@philiplawlor
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the requested credential and behavior. The only required credential is OPENWEATHERMAP_API_KEY and the skill documents using the OpenWeatherMap REST endpoints — this is proportionate to a weather skill.
✓
Instruction Scope
SKILL.md instructs performing GET requests to api.openweathermap.org and formatting responses. It explicitly checks the declared env var and a single dotfile (~/.openweathermap) for the key. It does not instruct reading other files, system state, or sending data to unrelated endpoints.
✓
Install Mechanism
No install spec or code is included (instruction-only), so nothing is written to disk or downloaded during install — lowest-risk install posture.
✓
Credentials
The skill requests exactly one credential (OPENWEATHERMAP_API_KEY), declared as primaryEnv, and documents an optional single file (~/.openweathermap). Those are reasonable and proportionate for calling the OpenWeatherMap API.
✓
Persistence & Privilege
always is false and the skill does not request system-wide config or modify other skills. Autonomous invocation is allowed (platform default) but there is no elevated persistence requested.
Assessment
This skill appears to do exactly what it says: call OpenWeatherMap with your API key. Before installing, ensure you trust the skill source (no homepage is provided), keep your OPENWEATHERMAP_API_KEY secret, and if you use the ~/.openweathermap file set restrictive file permissions (e.g., 600). If you’re uncomfortable storing a key in the agent environment or a file, prefer providing a key interactively and revoke/regenerate it if it is ever exposed.

Like a lobster shell, security has layers — review code before you run it.

latestvk97d6s35xqsmabwged5ed8qk2184gj7e

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

EnvOPENWEATHERMAP_API_KEY
Primary envOPENWEATHERMAP_API_KEY

Comments