ClawHub

Weather Test

v1.0.0

Get current weather and forecasts (no API key required).

⭐ 0· 73·0 current·0 all-time
by@tongguanghai
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the instructions: the skill only calls public weather services (wttr.in, open-meteo) using curl. Required binary (curl) is appropriate. One minor metadata inconsistency: _meta.json lists a different ownerId and slug than the registry metadata, which looks like a packaging/metadata mismatch but does not change runtime behavior.
✓
Instruction Scope
SKILL.md contains precise curl examples and explains formats and parameters. Instructions only perform network queries to public weather endpoints and an optional write to /tmp for a PNG; they do not ask the agent to read arbitrary files, environment variables, or other system state.
✓
Install Mechanism
No install spec and no code files — instruction-only. This is the lowest-risk install profile; nothing is downloaded or written by an installer.
✓
Credentials
The skill requests no environment variables or credentials, which is proportional for public, no-key weather APIs. There are no surprising credential requests.
✓
Persistence & Privilege
always:false and default invocation settings are appropriate. The skill does not request persistent presence or modify other skills or system-wide configuration.
Assessment
This skill is coherent and low-risk: it simply runs curl against wttr.in and Open-Meteo and asks for no secrets. Points to consider before installing: (1) the package metadata contains a differing ownerId/slug — verify the publisher if that matters to you; (2) these are third-party services, so queries go over the network and the service operator may log requests (avoid sending sensitive location data if you care about privacy); (3) the example saves a PNG to /tmp if used — that file is written locally and may be accessible to other users on the same host. If those issues are acceptable, the skill is reasonable to install.

Like a lobster shell, security has layers — review code before you run it.

latestvk9737tfsqbg7p1g34sabzvv6kh83smfj

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🌤️ Clawdis
Binscurl

Comments