wttr-weather

How to check weather forecasts using wttr.in service. Make sure to use this skill whenever the user mentions weather, forecast, temperature, or wants to chec...

This skill appears to be what it says: a wttr.in client. Before installing, be aware: (1) it makes outbound HTTP requests to wttr.in (and subdomains) and will request whatever host/name you provide — avoid passing sensitive internal hostnames or IPs you don't want probed; (2) the Python script invokes curl and wget at runtime, so those utilities (and Python) must be available on the host even though they aren't listed as required binaries; (3) the skill does not request credentials, and it doesn't modify other skills or system config. If you plan to allow autonomous agent invocation, remember the agent could use this skill to make network calls; if that concerns you, restrict autonomous use or run in a sandboxed environment.

Type: OpenClaw Skill Name: wttr-weather Version: 1.0.0 The wttr-weather skill is a legitimate utility for querying weather information from the wttr.in service. It includes a Python wrapper (scripts/weather.py) that uses subprocess to execute curl and wget for fetching data in various formats (JSON, ANSI, PNG). While the script lacks strict input sanitization for the output file path in the PNG download function—which could theoretically be used to overwrite files if the agent is misdirected—there is no evidence of malicious intent, data exfiltration, or prompt injection. The code and documentation (SKILL.md, quick-reference.md) are well-structured and align perfectly with the stated purpose.