← Back to Skills Marketplace
397
Downloads
0
Stars
0
Active Installs
3
Versions
Install in OpenClaw
/install skills-weather
Description
Get the weather for a specific location or coordinates
Usage Guidance
This skill appears coherent for fetching weather using QWeather. Before installing or using it: (1) review the upstream repository/package code (https://github.com/mangonob/skills-weather or the npm package) to ensure it does what you expect; (2) if you install globally with npm/pnpm, be aware global installs place executables on your PATH; (3) protect your QWeather credentials — store the config file (~/.skills-weather-config.json) securely and do not paste keys into public places; (4) the registry bundle here has no code included, so the platform will not auto-install anything — you (or the system admin) must install the npm package to run the CLI.
Capability Analysis
Type: OpenClaw Skill
Name: skills-weather
Version: 1.0.3
The skill bundle is classified as suspicious due to the explicit allowance for a user-controlled configuration file path via the `-f` parameter and `SKILLS_WEATHER_CONFIG_FILE_PATH` environment variable, as described in `SKILL.md`. While this is a legitimate feature, it represents a common vulnerability vector (e.g., Local File Inclusion or Arbitrary File Read) if the underlying skill code does not properly sanitize or validate the provided path. This constitutes a risky capability without clear malicious intent in the provided documentation, aligning with the 'suspicious' classification for potential vulnerabilities.
Capability Assessment
Purpose & Capability
The name/description match the instructions: the skill is a weather CLI that calls QWeather. The SKILL.md declares network request permission and documents QWeather credentials (privateKey, appId, credentialId, apiHost), which are appropriate for this purpose. No unrelated services, binaries, or credentials are requested.
Instruction Scope
The runtime instructions are narrowly scoped to installing and running a Node CLI and reading an optional config file (default ~/.skills-weather-config.json or SKILLS_WEATHER_CONFIG_FILE_PATH). They do not instruct reading other system files or exfiltrating data. Minor inconsistency: SKILL.md lists an entry (index.js) and npm install commands while the skill bundle provided here contains no code files; that likely means this registry entry is instruction-only and refers to a package hosted on npm/GitHub rather than including code in the bundle.
Install Mechanism
No install spec in the registry bundle (lowest platform risk). The SKILL.md recommends global installation via npm/pnpm, which is normal for Node CLIs but means installing code from the public npm registry/repository (moderate trust required). If you plan to install, review the upstream repository (https://github.com/mangonob/skills-weather) before running npm install -g.
Credentials
The skill does not require platform environment variables. The documented configuration file holds QWeather secrets (privateKey, appId, credentialId) — these are proportional and expected for a third‑party weather API integration. The optional SKILLS_WEATHER_CONFIG_FILE_PATH env var is reasonable.
Persistence & Privilege
The skill is not forced-always and is user-invocable; model-autonomy is allowed (the platform default). The skill does not request persistent system-wide privileges or to modify other skills/configs.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install skills-weather - After installation, invoke the skill by name or use
/skills-weather - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.3
- Updated installation instructions to use global flags (`-g`) with npm and pnpm.
- No other functional or parameter changes.
v1.0.1
- Removed the main implementation file (index.js), effectively disabling all functionality.
- Documentation (SKILL.md) updated with installation instructions and configuration file path details.
- No functional code remains in this version.
v1.0.0
Initial release of skills-weather.
- Fetches weather information by location name or coordinates.
- Supports real-time, daily, and hourly weather forecasts.
- Parameters allow selection of location, coordinates, forecast period, and custom config file.
- Enforces constraints between days/hours and location/coordinates options.
- Supports configuration via environment variable or config file.
- Uses QWeather as the weather data provider.
Metadata
Frequently Asked Questions
What is skills-weather?
Get the weather for a specific location or coordinates. It is an AI Agent Skill for Claude Code / OpenClaw, with 397 downloads so far.
How do I install skills-weather?
Run "/install skills-weather" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is skills-weather free?
Yes, skills-weather is completely free (open-source). You can download, install and use it at no cost.
Which platforms does skills-weather support?
skills-weather is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created skills-weather?
It is built and maintained by mangonob (@mangonob); the current version is v1.0.3.
More Skills