ClawHub

mycityweather

v1.0.1

Provides structured weather data including temperature, humidity, wind, precipitation, and clothing advice for specified cities and dates.

⭐ 1· 97·0 current·0 all-time
by@shilingong
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the files: the skill describes returning structured weather data and the provided SKILL.md, tool.json, and examples implement that. There are no unexpected environment variables, binaries, or config paths requested.
✓
Instruction Scope
Runtime instructions restrict behavior to parsing city/date and returning structured JSON (or simulated data if no API). The instructions explicitly forbid leaking API keys or real request addresses and do not direct the agent to read unrelated files, environment variables, or external endpoints beyond calling weather APIs when available.
✓
Install Mechanism
Instruction-only skill with no install spec and no code files; nothing is written to disk or downloaded during install.
ℹ
Credentials
The skill declares no required env vars or credentials, which is consistent with its ability to simulate data. SKILL.md mentions possible integration with third‑party weather APIs (which would require API keys), but no credentials are requested by the skill itself — if you enable real API integration later you'll need to provide keys separately. This is not inherently suspicious but worth noting.
✓
Persistence & Privilege
No special persistence or elevated privileges requested. always is false and the skill does not modify system or other skills' configurations.
Assessment
This skill appears coherent and low-risk as an instruction-only weather tool. However: the skill's source/homepage is unknown — verify the author before trusting it. If you want it to call real weather APIs you will need to supply API keys yourself; do not paste secrets into chat unless you trust the recipient. Test the skill first using simulated responses (it supports reasonable mock data), and avoid granting any environment variables or credentials to this skill unless you explicitly configure those separately and securely.

Like a lobster shell, security has layers — review code before you run it.

latestvk971rjb2jn9xwvwqd5hqtepdpn8444jb

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments