Weather Longli

PassAudited by ClawScan on May 1, 2026.

Overview

The skill appears to do what it claims: fetch public Longli weather data, generate clothing advice, optionally run on a schedule, and save a local weather log.

This looks safe for its stated purpose. Before installing, use a trusted source, install dependencies carefully, and only enable the cron schedule if you want automatic recurring weather reports.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing from an untrusted repository or package source could introduce unrelated code outside the reviewed artifacts.

Why it was flagged

The setup guidance relies on a manually chosen repository and unpinned Python packages. This is common for a simple Python skill, but package/source provenance is left to the user.

Skill content
git clone <repository> weather-longli ... pip install requests beautifulsoup4
Recommendation

Install only from the ClawHub package or a repository you trust, and consider pinning dependency versions in a requirements file.

What this means

Weather reports will accumulate locally and could later be read by other tools or users with access to the workspace.

Why it was flagged

The script stores generated weather reports and scraped weather data in a persistent local log. The logged data appears public and purpose-aligned.

Skill content
log_path = os.path.expanduser('~/.openclaw/workspace/weather_log.jsonl') ... f.write(json.dumps(log_entry, ensure_ascii=False) + '\n')
Recommendation

Keep the log path as expected, clear old logs if desired, and avoid treating scraped/logged web content as trusted instructions.

NoteHigh Confidence
ASI10: Rogue Agents
What this means

If the user enables the cron entry, the script will continue running on that schedule until the cron configuration is removed or disabled.

Why it was flagged

The skill provides a cron example that runs the report automatically on weekday mornings. This is disclosed and central to the scheduled weather-push feature.

Skill content
schedule: "20 7 * * 1-5" ... python3 daily_weather_report.py
Recommendation

Enable the schedule only if you want recurring weather messages, and remove the cron entry when you no longer need it.