← Back to Skills Marketplace
443
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install weather-query-ll
Description
当需要查询某个城市的天气时,可以调用使用这个技能。
Usage Guidance
这个技能本身看起来是正常的:它会根据你提供的城市和时间去抓取公共网页并整理天气信息,不需要任何 API key 或本地安装。但在安装前你应该考虑:
- 抓取的具体网站未指定,技能可能访问任意公共页面,返回内容可能不稳定或包含错误;
- 查询会把你提供的城市/时间作为请求的一部分发送到外部网站,若你包含敏感信息(精确地址、个人标识等)可能产生隐私泄露;
- 如果你需要可审计、准确的数据或可证明来源,优先选择调用受信任的天气 API(有明确域名和 API key)而不是通用网页抓取;
- 若关心日志或网络访问,确认平台的网络/抓取策略和日志保存政策,或要求技能限定抓取域名列表。
Capability Analysis
Type: OpenClaw Skill
Name: weather-query-ll
Version: 1.0.0
The `SKILL.md` file instructs the AI agent to use `web_fetch` to 'directly scrape web page data' for weather information. This instruction, without specifying a fixed domain or implementing input sanitization for URL construction, introduces a significant Server-Side Request Forgery (SSRF) or arbitrary web fetching vulnerability. An attacker could potentially manipulate user input (e.g., city name) to direct `web_fetch` to internal network resources or other unintended external targets, making the skill suspicious due to this high-risk capability.
Capability Assessment
Purpose & Capability
技能名/描述是查询城市天气;SKILL.md 要求提取城市和时间并使用 web_fetch 抓取网页来收集天气数据,返回温度、天气、湿度、风力等信息。没有要求与天气功能无关的环境变量、二进制或配置,功能与宣称目的相符。
Instruction Scope
指令明确要求用 web_fetch 抓取网页并整理数据,这与获取天气信息一致。但未限定要访问哪些网站或可信来源,意味着实现可能会访问任意公共网页并基于抓取结果生成响应;抓取来源不可靠或包含错误时会影响输出准确性。
Install Mechanism
这是一个纯文档(instruction-only)技能,没有 install spec 或代码文件;因此不会在系统上写入或执行下载的第三方代码,安装风险低。
Credentials
不要求任何环境变量、凭证或外部配置;所需权限与其描述的功能相称。
Persistence & Privilege
技能未设置 always:true,也不请求修改其他技能或系统范围配置。允许模型自主调用是平台默认行为,与本技能没有不相称的长期权限要求。
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install weather-query-ll - After installation, invoke the skill by name or use
/weather-query-ll - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
- Initial release of the weather skill for querying city weather.
- Extracts city and query time from user input.
- Uses web_fetch to gather real-time weather data.
- Returns formatted results including temperature, weather condition, humidity, and wind.
- Responds with user-friendly weather tips.
- Prompts for city if not specified in the user request.
Metadata
Frequently Asked Questions
What is 天气查询小技能?
当需要查询某个城市的天气时,可以调用使用这个技能。 It is an AI Agent Skill for Claude Code / OpenClaw, with 443 downloads so far.
How do I install 天气查询小技能?
Run "/install weather-query-ll" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is 天气查询小技能 free?
Yes, 天气查询小技能 is completely free (open-source). You can download, install and use it at no cost.
Which platforms does 天气查询小技能 support?
天气查询小技能 is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created 天气查询小技能?
It is built and maintained by Gyifei (@gyifei); the current version is v1.0.0.
More Skills