Weather Test

Get current weather and forecasts (no API key required).

Security Scan

The skill is instruction-only and simply tells the agent to curl public weather endpoints (wttr.in and Open-Meteo); its requirements and instructions match the described purpose.

Purpose & Capability

Name/description say 'weather, no API key' and SKILL.md only uses curl against wttr.in and Open-Meteo — the requested capabilities are minimal and appropriate.

Instruction Scope

Runtime instructions are limited to forming HTTP requests to the documented public endpoints and an example of saving a PNG to /tmp. There are no instructions to read unrelated files, environment variables, or post data to other endpoints.

Install Mechanism

No install spec and no code files — instruction-only. This is the lowest-risk install profile.

Credentials

The skill declares no required environment variables, credentials, or config paths. That is proportionate for a read-only weather lookup using public endpoints.

Persistence & Privilege

Skill is not always-enabled and does not request elevated or persistent privileges. It does not modify other skills or system-wide settings.

Assessment

This skill is low-risk: it only runs curl against public weather services and needs no credentials. Consider that requests include the queried location in the URL and will expose your IP to those services (wttr.in/Open‑Meteo may log requests). The example writes a PNG to /tmp if you use that command. If you need strict privacy or offline operation, don't use networked skills; otherwise this skill is coherent with its stated purpose.

Weather

Two free services, no API keys needed.

wttr.in (primary)

Quick one-liner:

curl -s "wttr.in/London?format=3"
# Output: London: ⛅️ +8°C

Compact format:

curl -s "wttr.in/London?format=%l:+%c+%t+%h+%w"
# Output: London: ⛅️ +8°C 71% ↙5km/h

Full forecast:

curl -s "wttr.in/London?T"

Format codes: %c condition · %t temp · %h humidity · %w wind · %l location · %m moon

Tips:

• URL-encode spaces: wttr.in/New+York
• Airport codes: wttr.in/JFK
• Units: ?m (metric) ?u (USCS)
• Today only: ?1 · Current only: ?0
• PNG: curl -s "wttr.in/Berlin.png" -o /tmp/weather.png

Open-Meteo (fallback, JSON)

Free, no key, good for programmatic use:

curl -s "https://api.open-meteo.com/v1/forecast?latitude=51.5&longitude=-0.12&current_weather=true"

Find coordinates for a city, then query. Returns JSON with temp, windspeed, weathercode.

Docs: https://open-meteo.com/en/docs