← Back to Skills Marketplace
mogglemoss

Tempest Weather

by Mogglemoss · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
473
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install tempest-weather-wf
Description
Fetches live weather data from a WeatherFlow Tempest weather station and returns structured JSON with current conditions, wind, precipitation, and lightning....
Usage Guidance
This skill appears coherent and only needs your Tempest Personal Access Token and station ID to function; it will make network requests to swd.weatherflow.com. Before installing, ensure you trust the token you provide (it's sensitive) and do not paste it into public places. The Python script requires the 'requests' package (pip install requests) or curl; follow SKILL.md guidance. Avoid configuring any automated high-frequency polling to prevent hitting rate limits—use the WebSocket API if you need real-time streaming. If you want extra assurance, inspect scripts/fetch_tempest.py locally (it's human-readable) before providing your token.
Capability Analysis
Type: OpenClaw Skill Name: tempest-weather-wf Version: 1.0.0 The skill is generally benign, fetching weather data from a legitimate API (`swd.weatherflow.com`) and handling credentials via environment variables. However, the `SKILL.md` file includes a `curl` command example for fetching data that directly interpolates environment variables (`${STATION_ID}?token=${TEMPEST_TOKEN}`). If an OpenClaw agent were to prompt a user for `TEMPEST_STATION_ID` or `TEMPEST_TOKEN` and then directly use these potentially unsanitized user inputs in the `curl` command, it could lead to a shell injection vulnerability (Remote Code Execution). While the `scripts/fetch_tempest.py` uses the safer `requests` library, the presence of this vulnerable `curl` instruction in `SKILL.md` makes the skill suspicious due to the potential for RCE.
Capability Assessment
Purpose & Capability
Name/description (Tempest weather data) match the files and operations: SKILL.md and scripts/fetch_tempest.py call the WeatherFlow Tempest REST endpoints and normalize observations. Required binaries (python3, optionally curl) and env vars (TEMPEST_TOKEN, TEMPEST_STATION_ID) are appropriate for this task.
Instruction Scope
Runtime instructions are narrowly scoped: check token/station env vars, call the documented Tempest REST endpoints, parse obs and return normalized JSON. Instructions and example curl/python snippets only reference the declared env vars and the documented WeatherFlow endpoints; they do not request unrelated files or credentials.
Install Mechanism
There is no install spec (instruction-only skill) and the included Python script is standalone. No remote download/extract steps are used. The only dependency is the well-known 'requests' Python package, which the script gracefully reports if missing.
Credentials
Only TEMPEST_TOKEN and TEMPEST_STATION_ID are required, which are the expected credentials for the Tempest API. The primary credential is TEMPEST_TOKEN. No unrelated secrets, config paths, or extra service tokens are requested.
Persistence & Privilege
Skill is not always-enabled (always:false) and is user-invocable. It does not request system-wide changes or other skills' configuration. Autonomous invocation is allowed (platform default) but does not combine with other red flags here.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install tempest-weather-wf
  3. After installation, invoke the skill by name or use /tempest-weather-wf
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of the Tempest Weather Skill. - Fetches live weather data from a WeatherFlow Tempest station using provided credentials. - Returns structured JSON with current conditions, wind, precipitation, lightning, and solar data. - Checks for required environment variables; guides user if missing. - Handles and explains API errors (invalid token, not found, offline stations). - Supports user requests about weather, wind, rain, lightning, and live sensor readings.
Metadata
Slug tempest-weather-wf
Version 1.0.0
License
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Tempest Weather?

Fetches live weather data from a WeatherFlow Tempest weather station and returns structured JSON with current conditions, wind, precipitation, and lightning.... It is an AI Agent Skill for Claude Code / OpenClaw, with 473 downloads so far.

How do I install Tempest Weather?

Run "/install tempest-weather-wf" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Tempest Weather free?

Yes, Tempest Weather is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Tempest Weather support?

Tempest Weather is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Tempest Weather?

It is built and maintained by Mogglemoss (@mogglemoss); the current version is v1.0.0.

💬 Comments