Weather Fetch
Security checks across malware telemetry and agentic risk
Overview
This is a straightforward weather lookup skill that opens weathercn.com with Playwright and parses weather data, with no evidence of hidden access or persistence.
Install only if you are comfortable running a Playwright/Chromium scraper that contacts weathercn.com. Expect to install Playwright yourself, treat city coverage as limited to the cities actually defined in the script unless updated, and consider running it in a contained environment because Chromium is launched with reduced sandboxing.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.