Weather Open-Meteo

Get current weather and forecasts using Open-Meteo API (no API key required). Optimized for PowerShell environments with Chinese support.

Do not run or allow this skill to change your system until you verify the actual scripts. The SKILL.md repeatedly references .ps1 files (weather-en.ps1, weather-cn.ps1, weather.ps1, etc.), but the registry/scan shows no code files included — ask the author for the full script sources or an updated package. If you obtain the scripts, inspect them for: (1) unexpected network endpoints beyond open-meteo.com, (2) any code that reads/writes sensitive files or transmits data elsewhere, and (3) obfuscated or encoded commands. Be cautious about running Set-ExecutionPolicy RemoteSigned — it relaxes script execution restrictions; only apply it after reviewing the scripts and preferably run them in a sandbox or limited account first. If the author provides the missing .ps1 files, re-run the evaluation with those file contents; if they cannot be provided, treat the skill as incomplete and avoid executing the referenced commands.

Type: OpenClaw Skill Name: weather-openmeteo Version: 1.0.0 The analyzed files consist entirely of documentation and metadata for a weather skill. They describe the skill's functionality, usage, creation process, and publishing steps, all centered around using the legitimate Open-Meteo API. There is no evidence of prompt injection against the AI agent, data exfiltration, malicious execution, persistence mechanisms, or obfuscation. Instructions like `Set-ExecutionPolicy RemoteSigned` are standard for running local PowerShell scripts and, while a potential vulnerability enabler if the scripts were malicious, do not indicate malicious intent within the provided documentation itself. All mentioned external network calls are to the legitimate `api.open-meteo.com`.