DC Weather

PassAudited by ClawScan on May 1, 2026.

Overview

This skill only provides a simple, disclosed Washington DC weather lookup using a public weather API.

This appears safe for its stated purpose. Be aware it relies on curl and jq examples and contacts Open-Meteo for public weather data, but it does not request credentials, install code, or access local data.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Info

#ASI02: Tool Misuse and Exploitation

What this means

Using the skill may cause the agent to make a network request to Open-Meteo and run a simple formatting command locally.

Why it was flagged

The skill instructs use of local command-line tools to make an external API request, but the request is fixed to Open-Meteo's public weather endpoint for Washington DC and matches the skill purpose.

Skill content

curl -s "https://api.open-meteo.com/v1/forecast?latitude=38.9072&longitude=-77.0369&current_weather=true&temperature_unit=fahrenheit" | jq -r

Recommendation

Install only if you are comfortable with the agent making a public weather API request; no credentials or private data are indicated.