by 安全扫描
OpenClaw
安全
high confidenceThe skill's requirements and instructions are consistent with its stated purpose (fetching weather from open-meteo with optional wttr.in fallback); it only relies on curl and jq and makes straightforward API calls.
评估建议
This skill appears coherent and limited to fetching weather from public APIs and formatting results with jq. Before installing: ensure you are comfortable with the agent making outbound requests (these calls reveal your IP and request headers to open-meteo and wttr.in). Also note one example uses http://wttr.in for PNG retrieval — prefer HTTPS if you need confidentiality. No API keys or credentials are required.详细分析 ▾
✓ 用途与能力
Name/description (weather via open-meteo, fallback wttr.in) match the actual instructions and required binaries (curl, jq). No unexplained credentials, binaries, or config paths are requested.
ℹ 指令范围
Runtime instructions perform only network requests to open-meteo and wttr.in and use jq for URL encoding/JSON parsing. This is appropriate for the task. Note: the examples will make outbound HTTP(S) requests (including one wttr.in example using http:// for PNG); those calls expose the caller's IP and request metadata to the remote services.
✓ 安装机制
Instruction-only skill with no install spec or downloadable code — lowest-risk installation footprint.
✓ 凭证需求
No environment variables, credentials, or config paths requested. The required binaries (curl, jq) are proportionate to the described functionality.
✓ 持久化与权限
Skill does not request always:true or any elevated persistence or system config changes. Default autonomous invocation is allowed but not unusual; the skill itself does not request additional privileges.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv0.1.52026/2/19
address security review feedback on encoding examples.
● 无害
安装命令 点击复制
官方npx clawhub@latest install weather-open-meteo
镜像加速npx clawhub@latest install weather-open-meteo --registry https://cn.clawhub-mirror.com
技能文档
Free weather service – solicita via cURL à API do Open‑Meteo e devolve JSON. Se qualquer etapa falhar, usa wttr.in como fallback.
Requisitos
- Bash/SH (GNU)
-curldisponível
-grepesedpadrão
Exemplo de uso
./bin/weather-open-meteo "São Paulo"
Output (JSON de Open‑Meteo ou texto de wttr.in).
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制