Weather Pollen

Weather and pollen reports for any location using free APIs. Get current conditions, forecasts, and pollen data.

Security Scan

The skill mostly matches a weather/pollen reporter, but there are clear mismatches between the description/README and the actual implementation (hardcoded pollen ZIP, unnecessary 'curl' requirement, and minor metadata/env inconsistencies).

Purpose & Capability

The skill claims to provide weather and pollen for any location, but the code fetches pollen only from a hardcoded endpoint for ZIP 75409 (Anna, TX). Weather uses configurable latitude/longitude, but pollen does not — so the core advertised capability (pollen for any location) is not implemented. Also the SKILL.md metadata declares a required binary 'curl' even though the implementation uses fetch; this requested binary is unnecessary for the stated purpose.

Instruction Scope

SKILL.md instructs the agent to use the weather_report tool and documents optional environment variables (WEATHER_LAT, WEATHER_LON, WEATHER_LOCATION). The runtime code only reads those WEATHER_* env vars (with sensible defaults). However SKILL.md promises location-based pollen data while the tool's pollen fetch is fixed to a single ZIP — a scope mismatch. There are no instructions to read unrelated files or exfiltrate secrets.

Install Mechanism

There is no install spec (instruction-only install), and the code has a small dependency (zod) declared in package.json. No downloads from arbitrary URLs or extraction steps are present. This is low-risk from an install standpoint.

Credentials

The registry lists no required environment variables, but SKILL.md and the code read optional WEATHER_LAT, WEATHER_LON, and WEATHER_LOCATION (with defaults). These env vars are reasonable and non-sensitive. The inconsistency between declared 'required env vars: none' and SKILL.md documentation is a minor mismatch that should be clarified (the vars are optional). No credentials or secrets are requested.

Persistence & Privilege

The skill does not request permanent presence (always: false), does not modify other skills or system settings, and does not require elevated privileges. It only makes outbound HTTP requests to public APIs.

What to consider before installing

This skill is not obviously malicious, but it contains implementation mismatches you should be aware of before installing: - Pollen is hardcoded: The code always queries Pollen.com for ZIP 75409 (Anna, TX). Despite the description saying it supports 'any location,' pollen results won't change with WEATHER_LAT / WEATHER_LON or a different 'location' argument. Ask the author to parameterize the pollen endpoint (by ZIP or by lat/lon) or explain the intended scope. - Unnecessary curl requirement: SKILL.md metadata marks 'curl' as a required binary, but the code uses fetch and doesn't call curl. This is an implementation inaccuracy; it should be removed or justified. - Minor metadata mismatch: The registry declares no required env vars while SKILL.md documents optional WEATHER_LAT/WEATHER_LON/WEATHER_LOCATION. The vars themselves are non-sensitive, but the docs/manifest should be aligned. - Network behavior: The skill performs HTTP calls to api.open-meteo.com and pollen.com. If you have policies about outbound network access or privacy, review those endpoints. No credentials are transmitted. Recommendation: If you want a location-agnostic pollen feature, request a fix (or avoid using the pollen portion). If the author confirms pollen will remain fixed to 75409, treat the skill as a localized Anna, TX weather+pollen tool rather than a general service.

Weather and Pollen Skill

Get weather and pollen reports for any location using free APIs.

Usage

When asked about weather or pollen in Anna, TX (or configured location), use the weather_report tool from this skill.

Tools

weather_report

Get weather and pollen data for a specified location.

Args:

• includePollen (boolean, default: true) - Include pollen data
• location (string, optional) - Location name to display (coordinates configured via env)

Example:

{"includePollen": true, "location": "Anna, TX"}

Configuration

Set location via environment variables (defaults for Anna, TX):

• WEATHER_LAT - Latitude (default: 33.3506)
• WEATHER_LON - Longitude (default: -96.3175)
• WEATHER_LOCATION - Location display name (default: "Anna, TX")

APIs Used

• Weather: Open-Meteo (free, no API key)
• Pollen: Pollen.com (free, no API key)