S2-Planetary-Element-Sniffer (S2 行星要素场嗅探器)
Security checks across malware telemetry and agentic risk
Overview
The skill's code, manifest, and runtime instructions are coherent with the stated goal of converting macro-weather + elevation into a 14‑dimensional tensor; requested permissions and configuration are proportional and optional.
This skill appears to do what it says: generate a 14‑element environmental tensor from coordinates and altitude. A few practical notes before installing: (1) The OPENWEATHER_API_KEY is optional — if you leave it blank the handler uses a simulated local model; only provide a real API key if you trust the author and want live telemetry. (2) The plugin manifest allows network access to api.openweathermap.org and api.weather.gov; although the current code only simulates when no key is set, future updates could use those network permissions — review updates before granting keys. (3) Because the skill is agent-invocable by default, consider whether you want an autonomous agent using this tool; if not, control invocation in your agent policy. Overall the package is internally consistent and low-risk, but exercise the usual caution with network-accessing plugins and API keys.
SkillSpector
SkillSpector findings are pending for this release.
VirusTotal
No VirusTotal findings