Xiao Chuang You Weather

AdvisoryAudited by Static analysis on May 6, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If memory contains stale, incorrect, or overly personal location information, the agent may use that location without the user restating it.

Why it was flagged

The skill may rely on conversation history or persistent memory to infer the user's location when no location is provided.

Skill content
完全未提及 → 从对话历史或 MEMORY.md 中推断用户位置
Recommendation

Confirm the city before relying on the forecast if location was inferred, and avoid storing sensitive location details in memory unless needed.

What this means

The requested or inferred city may be sent to wttr.in to retrieve weather information.

Why it was flagged

The skill discloses that it queries an external weather provider using the selected city.

Skill content
使用 `wttr.in` 查询实时天气:`https://wttr.in/{城市}?format=j1`
Recommendation

Use a broad city name rather than a precise address if you want to limit location exposure.