← 返回 Skills 市场

Tempest Weather

Name: Tempest Weather
Author: mogglemoss

作者 Mogglemoss · GitHub ↗ · v1.0.0

cross-platform ⚠ suspicious

473

总下载

当前安装

版本数

在 OpenClaw 中安装

/install tempest-weather-wf

功能描述

Fetches live weather data from a WeatherFlow Tempest weather station and returns structured JSON with current conditions, wind, precipitation, and lightning....

安全使用建议

This skill appears coherent and only needs your Tempest Personal Access Token and station ID to function; it will make network requests to swd.weatherflow.com. Before installing, ensure you trust the token you provide (it's sensitive) and do not paste it into public places. The Python script requires the 'requests' package (pip install requests) or curl; follow SKILL.md guidance. Avoid configuring any automated high-frequency polling to prevent hitting rate limits—use the WebSocket API if you need real-time streaming. If you want extra assurance, inspect scripts/fetch_tempest.py locally (it's human-readable) before providing your token.

功能分析

Type: OpenClaw Skill Name: tempest-weather-wf Version: 1.0.0 The skill is generally benign, fetching weather data from a legitimate API (`swd.weatherflow.com`) and handling credentials via environment variables. However, the `SKILL.md` file includes a `curl` command example for fetching data that directly interpolates environment variables (`${STATION_ID}?token=${TEMPEST_TOKEN}`). If an OpenClaw agent were to prompt a user for `TEMPEST_STATION_ID` or `TEMPEST_TOKEN` and then directly use these potentially unsanitized user inputs in the `curl` command, it could lead to a shell injection vulnerability (Remote Code Execution). While the `scripts/fetch_tempest.py` uses the safer `requests` library, the presence of this vulnerable `curl` instruction in `SKILL.md` makes the skill suspicious due to the potential for RCE.

能力评估

✓ Purpose & Capability

Name/description (Tempest weather data) match the files and operations: SKILL.md and scripts/fetch_tempest.py call the WeatherFlow Tempest REST endpoints and normalize observations. Required binaries (python3, optionally curl) and env vars (TEMPEST_TOKEN, TEMPEST_STATION_ID) are appropriate for this task.

✓ Instruction Scope

Runtime instructions are narrowly scoped: check token/station env vars, call the documented Tempest REST endpoints, parse obs and return normalized JSON. Instructions and example curl/python snippets only reference the declared env vars and the documented WeatherFlow endpoints; they do not request unrelated files or credentials.

✓ Install Mechanism

There is no install spec (instruction-only skill) and the included Python script is standalone. No remote download/extract steps are used. The only dependency is the well-known 'requests' Python package, which the script gracefully reports if missing.

✓ Credentials

Only TEMPEST_TOKEN and TEMPEST_STATION_ID are required, which are the expected credentials for the Tempest API. The primary credential is TEMPEST_TOKEN. No unrelated secrets, config paths, or extra service tokens are requested.

✓ Persistence & Privilege

Skill is not always-enabled (always:false) and is user-invocable. It does not request system-wide changes or other skills' configuration. Autonomous invocation is allowed (platform default) but does not combine with other red flags here.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install tempest-weather-wf
安装完成后，直接呼叫该 Skill 的名称或使用 /tempest-weather-wf 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

Initial release of the Tempest Weather Skill. - Fetches live weather data from a WeatherFlow Tempest station using provided credentials. - Returns structured JSON with current conditions, wind, precipitation, lightning, and solar data. - Checks for required environment variables; guides user if missing. - Handles and explains API errors (invalid token, not found, offline stations). - Supports user requests about weather, wind, rain, lightning, and live sensor readings.

元数据

Slug tempest-weather-wf

版本 1.0.0

许可证 —

累计安装 0

当前安装数 0

历史版本数 1

常见问题

Tempest Weather 是什么？

Fetches live weather data from a WeatherFlow Tempest weather station and returns structured JSON with current conditions, wind, precipitation, and lightning.... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 473 次。

如何安装 Tempest Weather？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install tempest-weather-wf」即可一键安装，无需额外配置。

Tempest Weather 是免费的吗？

是的，Tempest Weather 完全免费（开源免费），可自由下载、安装和使用。

Tempest Weather 支持哪些平台？

Tempest Weather 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。

谁开发了 Tempest Weather？

由 Mogglemoss（@mogglemoss）开发并维护，当前版本 v1.0.0。