China Weather
v1.0.3中国天气查询工具。Use when user wants to check weather for Chinese cities. Supports current weather, forecast, air quality, life index with rich data and beautiful fo...
⭐ 0· 83·0 current·0 all-time
by@tobewin
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the content: the SKILL.md provides weather-query logic, output formatting, and an API fallback chain. Required binaries (curl, python3) are appropriate for the described operations.
Instruction Scope
Runtime instructions run a local Python script that calls external weather APIs and formats results. The doc shows optional use of QWEATHER/OpenWeatherMap keys (via environment variables) but does not instruct reading unrelated files or secrets. It tells the user to run `pip install requests` and execute the embedded Python; these actions are within scope but will perform outbound network calls to third-party APIs.
Install Mechanism
No install spec; instruction-only. The only installation step is `pip install requests` invoked by the SKILL.md, which is a minimal dependency and expected for Python HTTP requests. No downloads from untrusted URLs or archive extraction are present.
Credentials
The skill does not require environment variables to function (wttr.in is the default). The SKILL.md documents optional environment variables (e.g., QWEATHER_API_HOST, QWEATHER_API_KEY, OpenWeatherMap API_KEY) for higher-priority APIs. Requesting optional API keys is proportionate to offering better data, but users should only supply keys they trust.
Persistence & Privilege
always is false and the skill contains no installation that modifies system or other skills' configurations. It does not request permanent agent-level privileges.
Assessment
This skill appears to do exactly what it says: run a local Python script and call public weather APIs with wttr.in as the default (no credentials needed). Before installing/using it: 1) Be aware the script makes outbound HTTP requests — any location you query is sent to third-party weather services. 2) Only set QWEATHER_API_HOST/QWEATHER_API_KEY or OpenWeatherMap keys if you trust those providers; prefer short-lived or least-privilege keys. 3) `pip install requests` will install a package into your Python environment — consider using a virtualenv to avoid changing a global environment. 4) If you want extra assurance, inspect the full SKILL.md (the embedded Python code) to confirm there are no unexpected network endpoints or telemetry. Overall this skill is internally consistent with its stated purpose.Like a lobster shell, security has layers — review code before you run it.
latestvk971rx00zq5carq59kk2z1qq1h83kfkj
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🌤️ Clawdis
Binscurl, python3
