Tempest Weather
PassAudited by ClawScan on May 1, 2026.
Overview
This appears to be a purpose-aligned read-only Tempest weather skill, but it needs your Tempest API token and station/device IDs.
This skill looks safe for its stated purpose if you want an agent to read Tempest weather data. Before installing, make sure you are comfortable providing a Tempest API token and station/device IDs, and prefer storing the token in the environment rather than typing it directly into chats or shell history.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The skill can use your Tempest token to read weather observations and historical stats for the configured station/device.
The skill requires a Tempest API token and station/device identifiers to access the user's Tempest data. This is expected for the stated WeatherFlow integration, but it is still credential-based account access.
`TEMPEST_API_TOKEN` (required) ... `TEMPEST_STATION_ID` ... `TEMPEST_DEVICE_ID`
Use a Tempest token intended for this purpose, keep it in environment configuration rather than sharing it in prompts, and rotate it if it is exposed.
You may have less assurance that the packaged artifacts exactly match the public repository.
The registry metadata does not identify a verified source, although it provides a project homepage. This is a provenance note, not evidence of malicious behavior.
Source: unknown; Homepage: https://github.com/wranglerdriver/tempest-weather
If provenance matters, compare the installed skill files with the linked repository before trusting it with your API token.