v1.0.1

mycityweather

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 8:11 AM.

Analysis

This is a simple instruction-only weather skill with no code, install steps, credentials, or persistence, though users should notice it may return simulated weather data if no real API is available.

GuidanceThis skill appears safe to install from a security perspective. Before relying on its forecasts, confirm whether it is connected to a real weather API or merely generating simulated weather-like data.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Human-Agent Trust Exploitation

SeverityLowConfidenceHighStatusNote

instruction.txt

若无真实 API，则返回合理模拟数据

The skill explicitly allows returning plausible simulated weather data when no real API is available, which matters because users may expect actual current forecast data.

User impactWeather results may be approximate or fictional unless the user knows a real weather API is configured.

RecommendationMake simulated responses clearly labeled to users, or configure and disclose a real weather data source before relying on the output.