← 返回 Skills 市场
jimmcq

WeatherKit

作者 jimmcq · GitHub ↗ · v1.0.0
cross-platform ✓ 安全检测通过
1272
总下载
2
收藏
2
当前安装
1
版本数
在 OpenClaw 中安装
/install weatherkit
功能描述
Access Apple WeatherKit REST API for detailed weather forecasts using JWT authentication.
安全使用建议
This skill appears to do exactly what it claims: generate a JWT from your Apple developer credentials and call Apple WeatherKit. Before installing, verify the skill source (registry shows 'Source: unknown'), and ensure you store the .p8 private key securely and only grant the skill access to a minimal-permission file path. Note the bundled script prints debug output (request URL and raw responses) to stderr — consider removing or disabling those debug prints if you don't want responses or request details to appear in logs. Also ensure your runtime provides trusted versions of the Python dependencies (PyJWT and requests). If you need higher assurance, run the script in an isolated environment (container) and rotate any exposed keys after testing.
功能分析
Type: OpenClaw Skill Name: weatherkit Version: 1.0.0 The skill bundle is benign. It is designed to access the Apple WeatherKit REST API, which requires reading environment variables for Apple API keys and the path to a private key file (`APPLE_WEATHERKIT_KEY_PATH`) to generate a JWT for authentication. All network requests are directed to the official `https://weatherkit.apple.com/api/v1` endpoint. There is no evidence of data exfiltration, unauthorized execution, persistence mechanisms, or prompt injection attempts against the agent. Debugging output to `stderr` is present but does not indicate malicious intent.
能力评估
Purpose & Capability
Name/description (WeatherKit REST API access) align with what the skill requires and does: it needs Apple developer identifiers and a local .p8 private key, generates a JWT, and calls weatherkit.apple.com. The requested env vars (APPLE_TEAM_ID, APPLE_KEY_ID, APPLE_WEATHERKIT_KEY_PATH, APPLE_SERVICE_ID) are exactly what WeatherKit JWT auth requires.
Instruction Scope
Runtime instructions and the Python code stay within the stated purpose (generate a JWT from the provided private key and call Apple WeatherKit). However, the script prints debug information to stderr (full request URL and raw response text) and echoes response bodies on errors; these debug prints could expose sensitive response content in logs. The script reads only the declared env vars and the provided private key file path; it does not access unrelated files or external endpoints beyond weatherkit.apple.com.
Install Mechanism
There is no install spec (instruction-only + a bundled Python file), so nothing is downloaded at install time. The only external libraries used are jwt (PyJWT) and requests; the skill does not provide an install step or pin package sources. This is low risk but note: the runtime environment must provide those Python packages.
Credentials
The environment variables requested are proportional and directly required for WeatherKit JWT authentication. The single file read (APPLE_WEATHERKIT_KEY_PATH -> .p8 private key) is expected. Users should be aware that providing the private key path grants the script access to that private key file, so file permissions and environment exposure matter.
Persistence & Privilege
The skill does not request always:true and does not attempt to modify other skills or system-wide settings. It runs on-demand and requires no privileged persistence.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install weatherkit
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /weatherkit 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release with JWT auth, forecast retrieval, and detailed error handling. Configurable via environment variables (APPLE_TEAM_ID, APPLE_KEY_ID, APPLE_WEATHERKIT_KEY_PATH, APPLE_SERVICE_ID) and supports date range and country code.
元数据
Slug weatherkit
版本 1.0.0
许可证
累计安装 3
当前安装数 2
历史版本数 1
常见问题

WeatherKit 是什么?

Access Apple WeatherKit REST API for detailed weather forecasts using JWT authentication. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 1272 次。

如何安装 WeatherKit?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install weatherkit」即可一键安装,无需额外配置。

WeatherKit 是免费的吗?

是的,WeatherKit 完全免费(开源免费),可自由下载、安装和使用。

WeatherKit 支持哪些平台?

WeatherKit 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 WeatherKit?

由 jimmcq(@jimmcq)开发并维护,当前版本 v1.0.0。

💬 留言讨论