Back to skill
Skillv1.0.3
VirusTotal security
Korea Weather · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 30, 2026, 3:19 AM
- Hash
- ced8d2e704c82208a1e3b4a6d8296d6891442eedb88d51cb0d7741fd895d890f
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: kma-weather Version: 1.0.3 The OpenClaw AgentSkills skill bundle 'kma-weather' is classified as benign. All Python scripts (`forecast.py`, `grid_converter.py`, `kma_api.py`, `midterm.py`, `weather_warnings.py`) use standard Python libraries for network requests (`urllib.request`) and argument parsing (`argparse`), without any evidence of malicious execution (e.g., `os.system`, `eval`, `exec` with untrusted input). The `SKILL.md` and other documentation files are purely informational and do not contain any prompt injection attempts or instructions for the AI agent to perform unauthorized actions. The skill correctly requires and uses the `KMA_SERVICE_KEY` environment variable to interact with legitimate Korea Meteorological Administration APIs (apis.data.go.kr), which is consistent with its stated purpose of providing Korean weather data. No data exfiltration to suspicious endpoints, persistence mechanisms, or obfuscation techniques were found.
- External report
- View on VirusTotal
