Whale Weather 🐳
v1.0.0全球城市天气查询与对比工具。支持中英文城市名，具备多语言输出、动态数据源切换（Open-Meteo）及精准大城市定位功能。
⭐ 1· 101·0 current·0 all-time
by@redapp
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The code and SKILL.md align with a weather lookup tool using Open‑Meteo (geocoding-api.open-meteo.com and api.open-meteo.com). However, the repository/registry metadata lists 'required binaries: none' while the scripts enforce the presence of python3 (require_cmd python3). Requiring python3 is reasonable for this skill but the metadata omission is an inconsistency.
Instruction Scope
Runtime instructions only tell the agent to run the included bash scripts, which in turn perform HTTPS calls to Open‑Meteo services and print sanitized results. The scripts do not read arbitrary files, environment secrets, or send data to third‑party endpoints outside Open‑Meteo. One misleading comment claims 'disable proxy env to prevent intercept/injection' but the code does not actually unset proxy environment variables — urllib will still respect HTTP(S)_PROXY if present.
Install Mechanism
There is no install spec; this is instruction + script based and nothing is downloaded or written during install. That is proportionate for a simple CLI-style skill.
Credentials
The skill requests no credentials or config paths (appropriate for a public weather API). The scripts do require python3 at runtime, which is not declared in registry 'required binaries'. There are no environment-variable reads or secret usage in the code.
Persistence & Privilege
always is false and the skill does not request persistent or elevated platform privileges, nor does it modify other skills or system settings.
Assessment
This skill looks coherent and limited to querying Open‑Meteo and printing results. Before installing/using it: 1) Verify you have python3 available (the scripts call python3 but the registry metadata omitted this). 2) Inspect the included scripts (they’re short) and only run them from a safe environment. 3) Note the code calls only Open‑Meteo endpoints; if you need to route traffic through proxies, be aware the script comment about disabling proxy env variables is inaccurate (the Python urllib call will still respect proxy env vars). 4) Because the source is 'unknown', prefer running the scripts in a sandbox or reviewing them locally before allowing an agent to execute them automatically.Like a lobster shell, security has layers — review code before you run it.
latestvk97c0qdtxws35bk4g22b0a8xbd84g4c8
License
MIT-0
Free to use, modify, and redistribute. No attribution required.