Weather Pollen

PassAudited by ClawScan on May 10, 2026.

Overview

The skill appears to do only weather and pollen lookups, with minor notes about external location-based API calls and overstated “any location” support.

This looks safe for normal weather and pollen use. Before installing, note that it does not truly resolve any location from the prompt: configure the latitude/longitude you want, and be aware pollen data is currently hard-coded for the Anna, TX ZIP code.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Your configured location coordinates are shared with the weather provider when the tool is used.

Why it was flagged

The skill sends configured latitude and longitude to an external weather API, which is expected for weather reporting but means location data leaves the local environment.

Skill content
`https://api.open-meteo.com/v1/forecast?latitude=${WEATHER_LAT}&longitude=${WEATHER_LON}`
Recommendation

Only configure coordinates you are comfortable sending to Open-Meteo and Pollen.com; no API keys or account credentials are required.

What this means

If you ask for another city, the report may display that city name while using different fixed/configured coordinates or Anna, TX pollen data.

Why it was flagged

The skill describes reports for any location, but the location argument only changes the display label, weather uses configured coordinates, and pollen data is hard-coded for ZIP 75409.

Skill content
`location: z.string().optional().describe('Location name to display (coordinates from env)')` and `https://www.pollen.com/api/forecast/current/pollen/75409`
Recommendation

Treat the tool as configured-location weather rather than true arbitrary-location lookup unless the coordinates and pollen endpoint are updated.