mcp-marine-weather

Marine weather forecasts via NOAA api.weather.gov — current conditions, multi-day forecasts, and marine weather warnings. No API key needed. Use when agents...

This skill appears to implement NOAA marine forecasts and needs no credentials, but exercise caution before using the recommended `npx -y <pkg>` installation: npx will fetch and run remote npm code. Actions to take before installing: 1) Verify the npm package name and publisher on the npm registry match the author you trust (the repository has inconsistent names/author strings - @vbotholemu vs @velocibot). 2) Prefer pinning to an explicit version rather than using -y to pull latest. 3) Inspect the published package contents (or the repository) to confirm it matches the included source, especially entrypoint code. 4) If you allow the optional NOAA_BASE_URL env var, ensure it points only to trusted NOAA endpoints — otherwise it could redirect requests to an untrusted host. 5) If possible, run the tool in a sandboxed environment or review its network activity before adding it to agents with broader privileges.

Type: OpenClaw Skill Name: mcp-marine-weather Version: 1.0.0 The skill is a legitimate implementation of a Marine Weather tool using the official NOAA API (api.weather.gov). The code in src/index.ts and dist/index.js follows standard Model Context Protocol (MCP) patterns, uses Zod for input validation, and contains no evidence of data exfiltration, malicious execution, or prompt injection.