Weather Open‑Meteo
PassAudited by ClawScan on May 1, 2026.
Overview
This weather skill looks benign; it uses expected public weather APIs and shell utilities, but the queried location is sent to third-party weather services.
This skill is reasonable for weather lookups and does not require an API key. Before installing, be aware that the location you ask about is sent to Open-Meteo and optionally wttr.in, so use city-level locations rather than exact private coordinates if privacy matters.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent may run simple curl and jq commands to fetch and parse weather data.
The skill relies on local command-line tools to make HTTP requests and parse JSON. This is expected and disclosed for a weather API skill.
The skill **requires** `curl` **and** `jq`.
Install only if you are comfortable with the agent making network requests for weather lookups; no special credentials are required.
Locations you ask about, including exact coordinates if provided, may be sent to Open-Meteo or wttr.in.
Weather lookups disclose the requested city or coordinates to external weather providers. This is purpose-aligned and disclosed, but users should understand the privacy implication.
This skill provides current weather and simple forecasts by querying the open‑meteo.com public API. If the geocoding lookup or weather request fails, the skill can fall back to **wttr.in** as a lightweight alternative.
Avoid using exact home or sensitive locations if you do not want them shared with public weather services; prefer general city names when possible.