DC Weather

PassAudited by VirusTotal on May 12, 2026.

Overview

Type: OpenClaw Skill Name: dc-weather Version: 1.0.0 The skill bundle is designed to fetch Washington D.C. weather data using the Open-Meteo API. The `SKILL.md` file contains two `bash` code blocks that use `curl` to query `https://api.open-meteo.com` for weather information and `jq` to format the output. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, obfuscation, or prompt injection attempts against the agent. All actions are transparent and directly align with the stated purpose of checking DC weather.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Note

ASI02: Tool Misuse and Exploitation

What this means

Using the skill may cause the agent to make a network request to Open-Meteo and run a simple formatting command locally.

Why it was flagged

The skill instructs use of local command-line tools to make an external API request, but the request is fixed to Open-Meteo's public weather endpoint for Washington DC and matches the skill purpose.

Skill content

curl -s "https://api.open-meteo.com/v1/forecast?latitude=38.9072&longitude=-77.0369&current_weather=true&temperature_unit=fahrenheit" | jq -r

Recommendation

Install only if you are comfortable with the agent making a public weather API request; no credentials or private data are indicated.