Back to skill
Skillv1.0.3

VirusTotal security

Korea Weather · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 30, 2026, 3:19 AM
Hash
ced8d2e704c82208a1e3b4a6d8296d6891442eedb88d51cb0d7741fd895d890f
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: kma-weather Version: 1.0.3 The OpenClaw AgentSkills skill bundle 'kma-weather' is classified as benign. All Python scripts (`forecast.py`, `grid_converter.py`, `kma_api.py`, `midterm.py`, `weather_warnings.py`) use standard Python libraries for network requests (`urllib.request`) and argument parsing (`argparse`), without any evidence of malicious execution (e.g., `os.system`, `eval`, `exec` with untrusted input). The `SKILL.md` and other documentation files are purely informational and do not contain any prompt injection attempts or instructions for the AI agent to perform unauthorized actions. The skill correctly requires and uses the `KMA_SERVICE_KEY` environment variable to interact with legitimate Korea Meteorological Administration APIs (apis.data.go.kr), which is consistent with its stated purpose of providing Korean weather data. No data exfiltration to suspicious endpoints, persistence mechanisms, or obfuscation techniques were found.
External report
View on VirusTotal