China Weather Data

• Outcome: Review
• Latest audit: Jul 24, 2026 · 6:54 PM UTC
• Version: 0.2.0

Overview

The skill is a weather-data tool, but it asks users to configure a data.cma.cn API key that the implementation does not actually use and documents credential-related workflows with HTTP links.

Review this before installing if you intend to use data.cma.cn: the current script appears to use only Open-Meteo, so do not configure a data.cma.cn API key unless the implementation is updated and you have verified the official site over HTTPS. The Open-Meteo query/download path is user-directed and much lower risk.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands

Findings (10)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 90% confidence
• Finding: The skill documentation describes network access, local file output, and local API key configuration, but no explicit permissions are declared. That creates a trust and review gap: users or platforms may grant or assume fewer privileges than the skill actually needs, increasing the chance of unreviewed file and network operations. In this context, the capability set is consistent with the stated weather-query purpose, so the issue is primarily under-declaration rather than overtly malicious behavior.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 94% confidence
• Finding: The documented behavior is inconsistent with the observed capabilities: it claims authenticated access to data.cma.cn and station-based querying, yet also stores an API key locally without clear demonstrated use, emits console/tabular output beyond CSV/JSON, and includes built-in station listing behavior not reflected in the description. Security reviews rely on accurate disclosure; mismatches can conceal sensitive credential handling or unexpected execution paths and make users trust behavior that is not actually implemented. The context makes this more concerning because the skill solicits an API key and references external services, so incomplete or inaccurate disclosure directly affects credential and data-handling risk.

External Transmission

Medium

• Category: Data Exfiltration

Content

## Data Sources

### Primary: 中国气象数据网 (http://data.cma.cn/)
- Requires registration and API key
- Official China meteorological station data
- Historical records from 1951 onwards

• Confidence: 89% confidence
• Finding: http://data.cma.cn/

External Transmission

Medium

• Category: Data Exfiltration

Content

- Requires registration and API key
- Official China meteorological station data
- Historical records from 1951 onwards
- API: http://data.cma.cn/docDetail/listDoc.html

### Fallback: Open-Meteo (https://open-meteo.com/)
- Free, no API key required

• Confidence: 94% confidence
• Finding: http://data.cma.cn/

External Transmission

Medium

• Category: Data Exfiltration

Content

## Data Sources

- **Primary**: [中国气象数据网](http://data.cma.cn/) — Official China meteorological data
- **Fallback**: [Open-Meteo](https://open-meteo.com/) — Free, no key required

---

• Confidence: 80% confidence
• Finding: http://data.cma.cn/

External Transmission

Medium

• Category: Data Exfiltration

Content

## 数据来源

- **主源**: [中国气象数据网](http://data.cma.cn/) — 中国官方气象数据
- **备源**: [Open-Meteo](https://open-meteo.com/) — 免费，无需密钥

• Confidence: 80% confidence
• Finding: http://data.cma.cn/

External Transmission

Medium

• Category: Data Exfiltration

Content

### Obtaining data.cma.cn API Key

1. Register at [data.cma.cn](http://data.cma.cn/) (free, requires Chinese phone number)
2. Log in → User Center → API Management
3. Apply for API access (usually approved within 1-2 business days)
4. Copy the API key and run: `python scripts\china-weather-data.py configure --key YOUR_KEY`

• Confidence: 82% confidence
• Finding: http://data.cma.cn/

External Transmission

Medium

• Category: Data Exfiltration

Content

### 获取 data.cma.cn API 密钥

1. 在 [data.cma.cn](http://data.cma.cn/) 注册（免费，需要中国手机号）
2. 登录 → 用户中心 → API 管理
3. 申请 API 访问权限（通常 1-2 个工作日批准）
4. 复制 API 密钥并运行: `python scripts\china-weather-data.py configure --key YOUR_KEY`

• Confidence: 82% confidence
• Finding: http://data.cma.cn/

Known Vulnerable Dependency: requests==2.28.0 — 8 advisory(ies): CVE-2024-47081 (Requests vulnerable to .netrc credentials leak via malicious URLs); CVE-2024-35195 (Requests `Session` object does not verify requests after making first request wi); CVE-2026-25645 (Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility func) +5 more

High

• Category: Supply Chain
• Confidence: 84% confidence
• Finding: requests==2.28.0

Known Vulnerable Dependency: tqdm==4.64.0 — 2 advisory(ies): CVE-2024-34062 (tqdm CLI arguments injection attack); CVE-2024-34062 (tqdm CLI arguments injection attack)

Low

• Category: Supply Chain
• Confidence: 74% confidence
• Finding: tqdm==4.64.0

VirusTotal

57/57 vendors flagged this skill as clean.

Static analysis

Detected: suspicious.dynamic_code_execution

Dynamic code execution detected.

Critical

• Code: suspicious.dynamic_code_execution
• Location: tests/test_china-weather-data.py:15