Travel Morning Weather

AdvisoryAudited by Static analysis on May 4, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Your home city and travel schedule locations may be retained and reused for future morning briefings.

Why it was flagged

The skill stores home and travel locations in a persistent memory file and updates it based on conversation.

Skill content
ask the user for their home city, then create it: { "default_location": "<User's City>, <Country>", "daily_locations": {} } ... When user mentions travel (dates + location), update `travel-plan.json` proactively
Recommendation

Install only if you are comfortable with this memory behavior; periodically review or delete `memory/travel-plan.json` if plans are private, outdated, or incorrectly captured.

What this means

The weather provider can see the city being queried, which may reveal where you are traveling or staying at a city level.

Why it was flagged

The morning briefing sends the resolved city/country to the external wttr.in weather service.

Skill content
curl -s "wttr.in/<City,Country>?format=%l:+%c+%t+(feels+like+%f)"
Recommendation

Avoid storing precise addresses as locations, and use this only if you are comfortable sharing city-level weather queries with the weather provider.

What this means

The morning briefing integration may be incomplete or may require instructions not present in the reviewed package.

Why it was flagged

The referenced `scripts/morning-briefing-instructions.md` file is not included in the provided file manifest.

Skill content
完整指令文件见:`scripts/morning-briefing-instructions.md`
Recommendation

Verify the intended morning briefing instructions from the installed package before relying on the cron integration, and do not fetch or follow unreviewed replacement instructions.