Travel Morning Weather
PassAudited by VirusTotal on May 4, 2026.
Overview
Type: OpenClaw Skill Name: travel-morning-weather Version: 1.0.0 The skill is a legitimate utility designed to update weather briefing locations based on user travel plans. It manages a local JSON file (travel-plan.json) using Python scripts (travel-cleaner.py, update-travel-plan.py) and queries a standard weather service (wttr.in). No evidence of data exfiltration, malicious execution, or harmful prompt injection was found; the code and instructions are strictly aligned with the stated purpose.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Your home city and travel schedule locations may be retained and reused for future morning briefings.
The skill stores home and travel locations in a persistent memory file and updates it based on conversation.
ask the user for their home city, then create it: { "default_location": "<User's City>, <Country>", "daily_locations": {} } ... When user mentions travel (dates + location), update `travel-plan.json` proactivelyInstall only if you are comfortable with this memory behavior; periodically review or delete `memory/travel-plan.json` if plans are private, outdated, or incorrectly captured.
The weather provider can see the city being queried, which may reveal where you are traveling or staying at a city level.
The morning briefing sends the resolved city/country to the external wttr.in weather service.
curl -s "wttr.in/<City,Country>?format=%l:+%c+%t+(feels+like+%f)"
Avoid storing precise addresses as locations, and use this only if you are comfortable sharing city-level weather queries with the weather provider.
The morning briefing integration may be incomplete or may require instructions not present in the reviewed package.
The referenced `scripts/morning-briefing-instructions.md` file is not included in the provided file manifest.
完整指令文件见：`scripts/morning-briefing-instructions.md`
Verify the intended morning briefing instructions from the installed package before relying on the cron integration, and do not fetch or follow unreviewed replacement instructions.