Amap Weather (高德天气)

Query weather via Amap (高德) Weather API — China's most accurate location-based weather service. Use when user asks about weather in Chinese cities, mentions...

Security Scan

The skill appears to implement a straightforward Amap weather client, but the published metadata omits the required AMAP_API_KEY environment variable declared in SKILL.md and used by the script—an inconsistency you should verify before installing.

Purpose & Capability

The skill's name, description, SKILL.md, and the bundled Python script all align: it queries Amap weather and needs an AMAP_API_KEY. However, the registry metadata lists no required environment variables or primary credential, which contradicts the SKILL.md and the script that reads AMAP_API_KEY. This is likely a metadata omission but is an incoherence that should be fixed.

Instruction Scope

SKILL.md and the script instruct only to call Amap's weather endpoint (restapi.amap.com) and to present formatted results. The instructions do not ask the agent to read unrelated files, other environment variables, or to transmit data to unexpected endpoints. The script only performs network calls to the documented API and formats output.

Install Mechanism

No install spec is provided (instruction-only with a bundled script). There are no downloads or archives, no brew/npm installs, and no writing of arbitrary code to disk beyond the included script. This is low-risk from an install mechanism perspective.

Credentials

The functional requirement for a single AMAP_API_KEY is reasonable and proportionate for this weather client. The concern is the mismatch between the script/SKILL.md (which require AMAP_API_KEY) and the registry metadata (which declares no required env vars). That mismatch could lead to confusion or misconfiguration; ensure the skill actually requests only that key and no other credentials at runtime.

Persistence & Privilege

The skill does not request elevated or persistent privileges. always is false and autonomous invocation is allowed (platform default). The skill does not modify other skills or system-wide settings.

What to consider before installing

This skill appears to be a simple Amap weather client and its code only calls the official Amap weather endpoint. However: (1) SKILL.md and the bundled script require an AMAP_API_KEY, but the registry metadata does not list any required env vars—confirm this discrepancy with the publisher before installing. (2) Because the source/homepage are unknown, review the included scripts yourself (they are small and readable) to verify there are no hidden endpoints or extra network calls. (3) If you provide an API key, consider creating a restricted key (limit it to the Amap Web Services/weather API and set IP or referrer restrictions if possible). (4) If you need higher assurance, ask the publisher to update registry metadata to declare AMAP_API_KEY and provide a verifiable homepage or source repository. If you cannot verify these points, treat the metadata inconsistency as a risk.

Prerequisites

• AMAP_API_KEY environment variable (高德 Web 服务 API Key)
• Apply at https://lbs.amap.com → 控制台 → 应用管理 → 创建应用 → 添加 Key (Web服务类型)

Quick Usage

Run the bundled script:

# Real-time weather (实况)
python3 scripts/amap_weather.py 北京

# 4-day forecast (预报)
python3 scripts/amap_weather.py 杭州 --forecast

# By adcode (区县级精度)
python3 scripts/amap_weather.py 110108 --forecast   # 海淀区

# Raw JSON output
python3 scripts/amap_weather.py 上海 --json

The script accepts city names (中文) or 6-digit adcodes. It has a built-in lookup table for 40+ major cities. For districts or less common cities, use adcodes directly.

Direct API Call (without script)

# Real-time
curl -s "https://restapi.amap.com/v3/weather/weatherInfo?key=${AMAP_API_KEY}&city=110000&extensions=base"

# Forecast
curl -s "https://restapi.amap.com/v3/weather/weatherInfo?key=${AMAP_API_KEY}&city=110000&extensions=all"

Parse the JSON: lives[0] for real-time, forecasts[0].casts[] for forecast (4 days).

Key Details

• extensions=base → real-time → lives[] (temperature, weather, humidity, wind)
• extensions=all → forecast → forecasts[].casts[] (4 days, day/night split)
• adcode 6-digit code required (not city name in API). Script handles name→adcode mapping.
• Updates: real-time hourly, forecast at ~8:00/11:00/18:00 CST
• Free quota: 300k calls/day

Formatting Output

When presenting weather to users:

• Use weather emoji (☀️晴 ⛅多云 🌧雨 ❄️雪 🌫雾 😷霾)
• Temperature in °C
• Include wind and humidity for real-time
• For forecast, show day/night separately with high/low temps

API Reference

For complete field definitions, error codes, and adcode list: see references/api-docs.md.