current_weather
v1.0.0获取用户当前位置和当前时间，通过浏览器访问天气网站查询天气信息。 支持查询今天、明天、后天等不同日期的天气情况。
⭐ 0· 110·0 current·0 all-time
byuwvwko@uwvwko-zzz
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill's name/description match the instructions: it locates the user (via explicit user input, conversation history, or IP geolocation) and scrapes weather websites for forecasts. The externally referenced sites (weather.com.cn, moji.com, nmc.cn, ip138.com, ip-api.com) are consistent with a weather/location skill.
Instruction Scope
Instructions remain focused on weather lookup, but they include optional IP-based geolocation (calling ip138.com or ip-api.com). This reaches out to external services and infers the user's location from IP — a privacy-relevant action. The SKILL.md does not explicitly require asking the user for permission before performing IP-based lookups; consider prompting the user first.
Install Mechanism
No install spec or code is present (instruction-only), so nothing is written to disk or fetched during install. This is the lowest-risk install model.
Credentials
The skill declares no environment variables, credentials, or config paths. The external network calls it describes are proportionate to weather/location lookup and do not request unrelated secrets.
Persistence & Privilege
always:false and no special privileges are requested. The skill is user-invocable and may be autonomously invoked by the agent (platform default), which is expected for a utility skill.
Assessment
This skill appears coherent for fetching weather, but be aware it may perform IP-based geolocation by contacting ip138.com or ip-api.com if the user doesn't supply a location — that reveals the user's public IP-derived city to external services. Before enabling automatic location lookup, make sure you (or your users) consent to that network access. Also confirm the agent platform's 'browser' action behaves as you expect (it will visit third-party weather sites and extract page content) and consider whether you prefer an API-based weather source (which may require an API key) for more stable results and clearer privacy controls.Like a lobster shell, security has layers — review code before you run it.
latestvk975ed2k944z77nkf35dx0zfzx836w56
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🌤️ Clawdis