和风天气

• Verdict: Pass
• Confidence: High
• Analyzed: Apr 24, 2026, 10:44 AM
• Findings: 0
• Version: 0.5.0

Overview

The skill's requirements and runtime instructions align with a QWeather (和风天气) CLI client: it asks for the API/project identifiers, a private key (path) for JWT auth, and service endpoints — all consistent with weather API usage.

This skill appears to be a straightforward CLI client for QWeather and its requirements are reasonable for that purpose. Before installing or providing credentials: 1) verify the GitHub repository/source code (cargo install --git will compile code from that repo); 2) only provide the QWEATHER_PRIVATE_KEY if you trust the repo and service, and prefer giving the private key as a file with restricted permissions rather than pasting it into open environments; 3) the BASE_URL/GEO_URL env vars let the client talk to custom endpoints — ensure they point to the official QWeather endpoints; 4) if you are unsure, inspect the repository code first or request a packaged release from a trusted source.