by 安全扫描
OpenClaw
安全
high confidenceThe skill's requirements and instructions are consistent with its stated purpose (fetching weather from open-meteo with optional wttr.in fallback); it only relies on curl and jq and makes straightforward API calls.
评估建议
This skill appears coherent and limited to fetching weather from public APIs and formatting results with jq. Before installing: ensure you are comfortable with the agent making outbound requests (these calls reveal your IP and request headers to open-meteo and wttr.in). Also note one example uses http://wttr.in for PNG retrieval — prefer HTTPS if you need confidentiality. No API keys or credentials are required.详细分析 ▾
✓ 用途与能力
Name/description (weather via open-meteo, fallback wttr.in) match the actual instructions and required binaries (curl, jq). No unexplained credentials, binaries, or config paths are requested.
ℹ 指令范围
Runtime instructions perform only network requests to open-meteo and wttr.in and use jq for URL encoding/JSON parsing. This is appropriate for the task. Note: the examples will make outbound HTTP(S) requests (including one wttr.in example using http:// for PNG); those calls expose the caller's IP and request metadata to the remote services.
✓ 安装机制
Instruction-only skill with no install spec or downloadable code — lowest-risk installation footprint.
✓ 凭证需求
No environment variables, credentials, or config paths requested. The required binaries (curl, jq) are proportionate to the described functionality.
✓ 持久化与权限
Skill does not request always:true or any elevated persistence or system config changes. Default autonomous invocation is allowed but not unusual; the skill itself does not request additional privileges.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv0.1.52026/2/19
address security review feedback on encoding examples.
● 无害
安装命令
点击复制官方npx clawhub@latest install weather-open-meteo
镜像加速npx clawhub@latest install weather-open-meteo --registry https://cn.longxiaskill.com✓ 镜像可用
技能文档
Free weather service – solicita via cURL à API do Open‑Meteo e devolve JSON. Se qualquer etapa falhar, usa wttr.in como fallback.
Requisitos
- Bash/SH (GNU)
-curldisponível
-grepesedpadrão
Exemplo de uso
./bin/weather-open-meteo "São Paulo"
Output (JSON de Open‑Meteo ou texto de wttr.in).