ClawHub
Back to skill

Security audit

weather

Security checks for vulnerabilities and agentic risk

Overview

This weather skill is a coherent weather lookup helper that uses disclosed Open-Meteo APIs and does not show hidden, persistent, or destructive behavior.

Before installing, understand that weather requests may send the queried place or coordinates to Open-Meteo. Avoid using precise private locations if that is sensitive, or ask for coarser location handling and your preferred response language.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

External Transmission

Medium
Category
Data Exfiltration
Content
## 常用天气数据源

- 当前天气和预报：优先使用 Open-Meteo API（免费，无需 API Key）
  - 端点：`https://api.open-meteo.com/v1/forecast`
  - 支持参数：latitude, longitude, current=temperature_2m,relative_humidity_2m,apparent_temperature,wind_speed_10m,wind_direction_10m,weather_code,precipitation,pressure_msl,uv_index
  - 预报天数可用 `forecast_days` 指定（默认 7 天，最多 16 天）
- 地理编码（地名转坐标）：使用 Open-Meteo Geocoding API
Confidence
86% confidence
Finding
The skill directs the agent to send user-supplied location queries and derived coordinates to third-party Open-Meteo endpoints. This is an external data transmission path that can expose potentially sensitive location information, especially for precise coordinates or historical queries tied to a user's movements.

Natural-Language Policy Violations

Low
Confidence
91% confidence
Finding
Line L86 directs the skill to reply in Chinese for Chinese cities because it is 'more natural'. This imposes a language choice based on location rather than the user's stated preference, which can violate language/locale choice policies.

Static analysis

No suspicious patterns detected.