← 返回 Skills 市场
397
总下载
0
收藏
0
当前安装
3
版本数
在 OpenClaw 中安装
/install skills-weather
功能描述
Get the weather for a specific location or coordinates
安全使用建议
This skill appears coherent for fetching weather using QWeather. Before installing or using it: (1) review the upstream repository/package code (https://github.com/mangonob/skills-weather or the npm package) to ensure it does what you expect; (2) if you install globally with npm/pnpm, be aware global installs place executables on your PATH; (3) protect your QWeather credentials — store the config file (~/.skills-weather-config.json) securely and do not paste keys into public places; (4) the registry bundle here has no code included, so the platform will not auto-install anything — you (or the system admin) must install the npm package to run the CLI.
功能分析
Type: OpenClaw Skill
Name: skills-weather
Version: 1.0.3
The skill bundle is classified as suspicious due to the explicit allowance for a user-controlled configuration file path via the `-f` parameter and `SKILLS_WEATHER_CONFIG_FILE_PATH` environment variable, as described in `SKILL.md`. While this is a legitimate feature, it represents a common vulnerability vector (e.g., Local File Inclusion or Arbitrary File Read) if the underlying skill code does not properly sanitize or validate the provided path. This constitutes a risky capability without clear malicious intent in the provided documentation, aligning with the 'suspicious' classification for potential vulnerabilities.
能力评估
Purpose & Capability
The name/description match the instructions: the skill is a weather CLI that calls QWeather. The SKILL.md declares network request permission and documents QWeather credentials (privateKey, appId, credentialId, apiHost), which are appropriate for this purpose. No unrelated services, binaries, or credentials are requested.
Instruction Scope
The runtime instructions are narrowly scoped to installing and running a Node CLI and reading an optional config file (default ~/.skills-weather-config.json or SKILLS_WEATHER_CONFIG_FILE_PATH). They do not instruct reading other system files or exfiltrating data. Minor inconsistency: SKILL.md lists an entry (index.js) and npm install commands while the skill bundle provided here contains no code files; that likely means this registry entry is instruction-only and refers to a package hosted on npm/GitHub rather than including code in the bundle.
Install Mechanism
No install spec in the registry bundle (lowest platform risk). The SKILL.md recommends global installation via npm/pnpm, which is normal for Node CLIs but means installing code from the public npm registry/repository (moderate trust required). If you plan to install, review the upstream repository (https://github.com/mangonob/skills-weather) before running npm install -g.
Credentials
The skill does not require platform environment variables. The documented configuration file holds QWeather secrets (privateKey, appId, credentialId) — these are proportional and expected for a third‑party weather API integration. The optional SKILLS_WEATHER_CONFIG_FILE_PATH env var is reasonable.
Persistence & Privilege
The skill is not forced-always and is user-invocable; model-autonomy is allowed (the platform default). The skill does not request persistent system-wide privileges or to modify other skills/configs.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install skills-weather - 安装完成后，直接呼叫该 Skill 的名称或使用
/skills-weather触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.3
- Updated installation instructions to use global flags (`-g`) with npm and pnpm.
- No other functional or parameter changes.
v1.0.1
- Removed the main implementation file (index.js), effectively disabling all functionality.
- Documentation (SKILL.md) updated with installation instructions and configuration file path details.
- No functional code remains in this version.
v1.0.0
Initial release of skills-weather.
- Fetches weather information by location name or coordinates.
- Supports real-time, daily, and hourly weather forecasts.
- Parameters allow selection of location, coordinates, forecast period, and custom config file.
- Enforces constraints between days/hours and location/coordinates options.
- Supports configuration via environment variable or config file.
- Uses QWeather as the weather data provider.
元数据
常见问题
skills-weather 是什么？
Get the weather for a specific location or coordinates. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 397 次。
如何安装 skills-weather？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install skills-weather」即可一键安装，无需额外配置。
skills-weather 是免费的吗？
是的，skills-weather 完全免费（开源免费），可自由下载、安装和使用。
skills-weather 支持哪些平台？
skills-weather 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 skills-weather？
由 mangonob（@mangonob）开发并维护，当前版本 v1.0.3。
推荐 Skills