Weather Longli

PassAudited by VirusTotal on May 11, 2026.

Overview

Type: OpenClaw Skill Name: weather-longli Version: 1.0.0 The skill is a legitimate weather reporting tool for Longli County, Guizhou, which scrapes public data from the China Weather Network (weather.com.cn). The Python scripts (crawl_longli_weather.py, daily_weather_report.py) perform standard web scraping and local data processing without any signs of data exfiltration, malicious execution, or obfuscation.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing from an untrusted repository or package source could introduce unrelated code outside the reviewed artifacts.

Why it was flagged

The setup guidance relies on a manually chosen repository and unpinned Python packages. This is common for a simple Python skill, but package/source provenance is left to the user.

Skill content
git clone <repository> weather-longli ... pip install requests beautifulsoup4
Recommendation

Install only from the ClawHub package or a repository you trust, and consider pinning dependency versions in a requirements file.

What this means

Weather reports will accumulate locally and could later be read by other tools or users with access to the workspace.

Why it was flagged

The script stores generated weather reports and scraped weather data in a persistent local log. The logged data appears public and purpose-aligned.

Skill content
log_path = os.path.expanduser('~/.openclaw/workspace/weather_log.jsonl') ... f.write(json.dumps(log_entry, ensure_ascii=False) + '\n')
Recommendation

Keep the log path as expected, clear old logs if desired, and avoid treating scraped/logged web content as trusted instructions.

What this means

If the user enables the cron entry, the script will continue running on that schedule until the cron configuration is removed or disabled.

Why it was flagged

The skill provides a cron example that runs the report automatically on weekday mornings. This is disclosed and central to the scheduled weather-push feature.

Skill content
schedule: "20 7 * * 1-5" ... python3 daily_weather_report.py
Recommendation

Enable the schedule only if you want recurring weather messages, and remove the cron entry when you no longer need it.