Weather Digest

Generate daily Weather Intelligence Digest using NOAA/NWS data with customizable locations and alert monitoring.

This skill appears to do exactly what it claims: query api.weather.gov and build a digest. Before installing: (1) review config.json and remove any sample locations you don't want; (2) inspect the Python files locally (they are plain, readable code) and confirm the User-Agent string if you need a different identifier; (3) do not supply webhook URLs or other credentials unless you intend to publish the digest externally (the docs show Slack webhook examples but the script won't send anything by itself); (4) optional automation (cron/LaunchAgent/heartbeat) requires explicit setup and can expose digest outputs to wherever you point them — only configure targets you control. The repo contains duplicate copies of the same files in a 'weather digest' folder and at top level; this is likely benign but you may want to keep only one copy to avoid confusion.

Type: OpenClaw Skill Name: weather-digest Version: 1.0.0 The OpenClaw AgentSkill 'weather-digest' is designed to fetch and format weather data from the public NOAA/NWS API. The Python script (`weather_digest.py`) makes legitimate HTTP requests to `api.weather.gov` and processes the returned JSON. It reads a user-provided configuration file (`config.json`) and writes output files (Markdown, HTML, JSON) to specified paths. While the ability to read/write arbitrary local files via command-line arguments (`--config`, `--output`, `--html`, `--json`) could be a vulnerability in a poorly secured execution environment, the skill itself does not demonstrate malicious intent; its `SKILL.md` instructions provide benign usage examples. The `automation.md` file offers legitimate recipes for users to automate the skill, including cron jobs and Slack notifications, which are standard integrations and not indicative of malice. No evidence of data exfiltration, unauthorized persistence, or prompt injection against the agent was found.