← Back to Skills Marketplace
1272
Downloads
2
Stars
2
Active Installs
1
Versions
Install in OpenClaw
/install weatherkit
Description
Access Apple WeatherKit REST API for detailed weather forecasts using JWT authentication.
Usage Guidance
This skill appears to do exactly what it claims: generate a JWT from your Apple developer credentials and call Apple WeatherKit. Before installing, verify the skill source (registry shows 'Source: unknown'), and ensure you store the .p8 private key securely and only grant the skill access to a minimal-permission file path. Note the bundled script prints debug output (request URL and raw responses) to stderr — consider removing or disabling those debug prints if you don't want responses or request details to appear in logs. Also ensure your runtime provides trusted versions of the Python dependencies (PyJWT and requests). If you need higher assurance, run the script in an isolated environment (container) and rotate any exposed keys after testing.
Capability Analysis
Type: OpenClaw Skill
Name: weatherkit
Version: 1.0.0
The skill bundle is benign. It is designed to access the Apple WeatherKit REST API, which requires reading environment variables for Apple API keys and the path to a private key file (`APPLE_WEATHERKIT_KEY_PATH`) to generate a JWT for authentication. All network requests are directed to the official `https://weatherkit.apple.com/api/v1` endpoint. There is no evidence of data exfiltration, unauthorized execution, persistence mechanisms, or prompt injection attempts against the agent. Debugging output to `stderr` is present but does not indicate malicious intent.
Capability Assessment
Purpose & Capability
Name/description (WeatherKit REST API access) align with what the skill requires and does: it needs Apple developer identifiers and a local .p8 private key, generates a JWT, and calls weatherkit.apple.com. The requested env vars (APPLE_TEAM_ID, APPLE_KEY_ID, APPLE_WEATHERKIT_KEY_PATH, APPLE_SERVICE_ID) are exactly what WeatherKit JWT auth requires.
Instruction Scope
Runtime instructions and the Python code stay within the stated purpose (generate a JWT from the provided private key and call Apple WeatherKit). However, the script prints debug information to stderr (full request URL and raw response text) and echoes response bodies on errors; these debug prints could expose sensitive response content in logs. The script reads only the declared env vars and the provided private key file path; it does not access unrelated files or external endpoints beyond weatherkit.apple.com.
Install Mechanism
There is no install spec (instruction-only + a bundled Python file), so nothing is downloaded at install time. The only external libraries used are jwt (PyJWT) and requests; the skill does not provide an install step or pin package sources. This is low risk but note: the runtime environment must provide those Python packages.
Credentials
The environment variables requested are proportional and directly required for WeatherKit JWT authentication. The single file read (APPLE_WEATHERKIT_KEY_PATH -> .p8 private key) is expected. Users should be aware that providing the private key path grants the script access to that private key file, so file permissions and environment exposure matter.
Persistence & Privilege
The skill does not request always:true and does not attempt to modify other skills or system-wide settings. It runs on-demand and requires no privileged persistence.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install weatherkit - After installation, invoke the skill by name or use
/weatherkit - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release with JWT auth, forecast retrieval, and detailed error handling. Configurable via environment variables (APPLE_TEAM_ID, APPLE_KEY_ID, APPLE_WEATHERKIT_KEY_PATH, APPLE_SERVICE_ID) and supports date range and country code.
Metadata
Frequently Asked Questions
What is WeatherKit?
Access Apple WeatherKit REST API for detailed weather forecasts using JWT authentication. It is an AI Agent Skill for Claude Code / OpenClaw, with 1272 downloads so far.
How do I install WeatherKit?
Run "/install weatherkit" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is WeatherKit free?
Yes, WeatherKit is completely free (open-source). You can download, install and use it at no cost.
Which platforms does WeatherKit support?
WeatherKit is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created WeatherKit?
It is built and maintained by jimmcq (@jimmcq); the current version is v1.0.0.
More Skills