Weather Query

Use when users ask about weather conditions, forecasts, or climate information for locations in China.

This skill appears to do what it says: run two shell scripts that call a third‑party weather API and return results. Before installing, consider that: (1) location queries (user input) are sent to https://60s.viki.moe — verify you trust that provider and its privacy policy if you will send sensitive or private location data; (2) SKILL.md does not list the remote hostname, so inspect the scripts (already included) to confirm behavior; (3) no credentials are requested, so there is no obvious credential exfiltration risk, but if you prefer trusted sources swap the API endpoint to a known provider; (4) run the skill in a controlled environment if you need to audit traffic (e.g., via a network proxy) before deploying broadly.

Type: OpenClaw Skill Name: weather-query Version: 0.1.0 The OpenClaw AgentSkills bundle 'weather-query' is classified as benign. The `SKILL.md` provides clear, non-malicious instructions to the AI agent for querying weather information, focusing on output formatting and token optimization. The `scripts/forecast.sh` and `scripts/realtime.sh` shell scripts correctly sanitize user input for the `query` parameter using `curl --data-urlencode`, effectively preventing shell injection vulnerabilities. All parameters are validated with regex, and the scripts make legitimate API calls to `https://60s.viki.moe/v2/weather` and `https://60s.viki.moe/v2/weather/forecast` for their stated purpose, with no evidence of data exfiltration, malicious execution, persistence mechanisms, or obfuscation.