Weather Aqi

v1.0.0

Provides real-time weather and air quality index (AQI) data for any location using Open-Meteo and Waqi API.

⭐ 0· 92·0 current·0 all-time

bybuihieu@guchigangz

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for guchigangz/hb-weather-aqi.

Previewing Install & Setup.

Prompt PreviewInstall & Setup

Install the skill "Weather Aqi" (guchigangz/hb-weather-aqi) from ClawHub.
Skill page: https://clawhub.ai/guchigangz/hb-weather-aqi
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install hb-weather-aqi

ClawHub CLI

Package manager switcher

npx clawhub@latest install hb-weather-aqi

Security Scan

VirusTotal

Benign

View report →

OpenClaw

Suspicious

medium confidence

ℹ

Purpose & Capability

The code and SKILL.md call Open‑Meteo geocoding/forecast and the WAQI API, which matches the skill's description. However, the registry metadata lists no required env vars while both the code and SKILL.md expect WAQITOKEN.

✓

Instruction Scope

Runtime instructions limit actions to web_fetch calls (Open‑Meteo and WAQI) and reading WAQITOKEN from the environment; there are no instructions to read unrelated files, system state, or to exfiltrate data to other endpoints.

ℹ

Install Mechanism

No install spec (lower risk) and the code is pure fetch-based JavaScript with no external downloads. Note: a code file is packaged but there is no explicit install/runtime packaging guidance in the registry metadata.

Credentials

The code uses process.env.WAQITOKEN to call the WAQI API (reasonable for AQI queries), but the registry metadata incorrectly reports 'Required env vars: none'. This mismatch is concerning because a required secret is not declared in metadata, which could lead to confusion or accidental disclosure policies being bypassed.

✓

Persistence & Privilege

The skill does not request persistent or elevated privileges (always is false), does not modify other skills or system config, and only performs on‑demand network calls.

What to consider before installing

This skill's code matches its description and only needs a WAQI API token to fetch AQI, so the functionality is plausible — but the registry metadata failing to declare WAQITOKEN is an inconsistency you should clarify before installing. Ask the publisher to update metadata to list WAQITOKEN, confirm the token's intended scope (prefer a limited-purpose WAQI token), and avoid supplying any broader credentials. Because the package includes a code file but no install spec or source/homepage, consider requesting the source or reviewing the code yourself (it was provided and looks straightforward) and testing with a throwaway token first.

✗

weather_aqi_claw.js:12

Environment variable access combined with network send.

Patterns worth reviewing

These patterns may indicate risky behavior. Check the VirusTotal and OpenClaw results above for context-aware analysis before installing.

Like a lobster shell, security has layers — review code before you run it.

latestvk970vxk1f9hfs4d9k01bt28nad84kfv2

92downloads

0stars

1versions

Updated 2w ago

v1.0.0

MIT-0

Weather & AQI Realtime Skill

Version: 1.0.0
Author: Perplexity AI (dựa trên weather_aqi.js)
Description: Lấy thời tiết + AQI realtime cho bất kỳ location (Hanoi, NYC...). Dùng Open-Meteo + Waqi API. Output JSON/text.

Usage

Agent query: "Weather AQI Hanoi"
JSON: "Get weather_aqi json Tokyo"
Env: WAQITOKEN=your_waqi_token

Tools Required

web_fetch (geocoding, weather, AQI)
env (WAQITOKEN)

License: MIT-0 | Safe: VirusTotal clean

Comments

Loading comments...