Surfline (public)

Get surf forecasts and current conditions from Surfline public endpoints (no login). Use to look up Surfline spot IDs, fetch forecasts/conditions for specific spots, and summarize multiple favorite spots.

This skill appears to do what it claims: query Surfline public endpoints and summarize results. Before installing, note: (1) the author is unknown — if you need stronger assurance, review the included Python files yourself; (2) it requires python3 at runtime (not declared in registry metadata); (3) it will read ~/.config/surfline/favorites.json (if you use favorites) and create/read cache files under ~/.cache/surfline by default — you can set SURFLINE_CACHE_DIR and SURFLINE_CACHE_TTL_SEC to control this; (4) it uses the network to contact services.surfline.com and sets a custom User-Agent; (5) run in a sandbox if you prefer, but no credentials or secrets are requested and there is no suspicious or obfuscated behavior in the code.

Type: OpenClaw Skill Name: surfline Version: 0.1.0 The skill's code and documentation are clearly aligned with its stated purpose of fetching public surf forecasts from Surfline. It uses standard Python libraries for network requests to `https://services.surfline.com` and for local caching in `~/.cache/surfline`. Configuration is read from `~/.config/surfline/favorites.json`. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts against the agent in SKILL.md. All observed behaviors are benign and expected for a skill of this type.