Tempest Weather
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The skill can use your Tempest token to read weather observations and historical stats for the configured station/device.
The skill requires a Tempest API token and station/device identifiers to access the user's Tempest data. This is expected for the stated WeatherFlow integration, but it is still credential-based account access.
`TEMPEST_API_TOKEN` (required) ... `TEMPEST_STATION_ID` ... `TEMPEST_DEVICE_ID`
Use a Tempest token intended for this purpose, keep it in environment configuration rather than sharing it in prompts, and rotate it if it is exposed.
You may have less assurance that the packaged artifacts exactly match the public repository.
The registry metadata does not identify a verified source, although it provides a project homepage. This is a provenance note, not evidence of malicious behavior.
Source: unknown; Homepage: https://github.com/wranglerdriver/tempest-weather
If provenance matters, compare the installed skill files with the linked repository before trusting it with your API token.