My Local Weather

Provides real-time local weather, forecasts, alerts, and historical data with unit conversion, using a configurable API key for privacy-focused, fast access.

Do not install or provide API keys until these inconsistencies are resolved. Specific steps you can take: 1) Ask the publisher to explain why SKILL.md asks for WEATHER_API_KEY and lists axios/dotenv while the code uses wttr.in and node-fetch; request a corrected SKILL.md or updated code. 2) Verify the owner ID and source (ownerId in _meta.json differs from registry owner listed) and prefer skills with a known source/homepage. 3) If you still want to test it, run it in a sandboxed environment without supplying any real API keys or secrets. 4) If you intend to use an API key, confirm the code actually reads the environment variable and handles it securely before providing one.

Type: OpenClaw Skill Name: my-local-weather Version: 1.0.0 The skill is a standard weather utility that retrieves data from the legitimate wttr.in service. Although there is a minor discrepancy between the documentation (SKILL.md), which mentions Axios and API keys, and the implementation (index.js), which uses node-fetch and a free service, the code is transparent, properly sanitizes inputs using encodeURIComponent, and shows no signs of malicious intent or data exfiltration.