← Back to Skills Marketplace
369
Downloads
0
Stars
0
Active Installs
7
Versions
Install in OpenClaw
/install qweather-china
Description
基于中国气象局数据的完整天气服务，通过和风天气API提供实时天气、天气预报、生活指数、空气质量等全方位天气信息。专为中国用户优化，数据更准确，功能更全面。
Usage Guidance
This package largely looks like a legitimate QWeather client, but there are a few red flags to check before installing or providing credentials:
- Resolve metadata mismatch: the registry summary showed no required env vars while SKILL.md requires QWEATHER_API_HOST, QWEATHER_PROJECT_ID, QWEATHER_CREDENTIALS_ID and QWEATHER_PRIVATE_KEY_PATH. Confirm which is authoritative.
- Inspect install.sh / install.bat before running. Look for network downloads, pip installs, or commands that change system files or permissions.
- Review qweather.py and install scripts to ensure they only call qweatherapi endpoints and do not exfiltrate data to other domains. SKILL.md declares network endpoints limited to *.qweatherapi.com — confirm the code adheres to that.
- Protect your private key: use a dedicated key with least privilege, store it at the indicated path (~/.config/qweather/private.pem) with 600 permissions, and do not reuse OpenClaw/agent keys.
- If you want higher assurance, ask the publisher for a public git repository/commit history and a simple README showing the exact runtime env variables used; or run the code in an isolated environment/container and monitor outbound connections when exercising the skill.
Given the metadata inconsistencies and presence of installer scripts (but otherwise coherent purpose), treat this as suspicious until you validate the items above.
Capability Analysis
Type: OpenClaw Skill
Name: qweather-china
Version: 1.2.2
The skill bundle provides a comprehensive weather service for China using the QWeather API. The code and instructions in SKILL.md and qweather.py are consistent with the stated purpose, implementing JWT authentication, city location handling, and multi-platform encoding support. The install.sh script follows standard procedures for dependency installation and environment verification, and the requested filesystem/network permissions are appropriately restricted to the application's configuration, cache, and the official API endpoints (*.qweatherapi.com).
Capability Tags
Capability Assessment
Purpose & Capability
The name/description (QWeather China) align with the code and runtime instructions: the skill uses a QWeather API client, handles locations, caching, and produces weather outputs. However the registry metadata at the top of the submission lists no required environment variables while the included SKILL.md explicitly requires QWEATHER_API_HOST, QWEATHER_PROJECT_ID, QWEATHER_CREDENTIALS_ID and QWEATHER_PRIVATE_KEY_PATH — an inconsistency in declared requirements that should be resolved.
Instruction Scope
SKILL.md and the python sources limit behavior to weather-related actions: reading config (~/.config/qweather/config.json), reading private key (~/.config/qweather/private.pem), writing/reading cache (~/.cache/qweather) and calling qweatherapi endpoints. The docs explicitly disallow web_search and call out the needed files. Some comments mention reading a 'memory' (MEMORY.md) for remembered city but the code shown does not perform broad arbitrary file collection; still verify any memory-reading code before install.
Install Mechanism
No formal install spec was provided to the platform (the skill is marked as having 'No install spec / instruction-only'), yet the bundle includes many source files and install.sh/install.bat scripts. That is not necessarily malicious, but you should inspect install.sh / install.bat for network downloads or commands executed with elevated privileges before running them. There is no evidence of downloads from arbitrary servers in the provided metadata, but the presence of installer scripts increases the importance of manual review.
Credentials
The environment variables declared in SKILL.md (API host, project id, credentials id, private key path) are expected for JWT-based QWeather API access and are proportional to the skill's purpose. These are sensitive (private key path and credential identifiers). The top-level registry metadata omitted these env vars, creating an information mismatch—verify which envs the runtime actually reads and avoid supplying unrelated credentials. The skill restricts network endpoints to *.qweatherapi.com in metadata, which is appropriate.
Persistence & Privilege
The skill does not request always:true and is user-invocable with normal autonomous invocation allowed (platform default). It requests read access to its own config/private key and read/write cache in ~/.cache/qweather — scopes that are reasonable for this client. It does not declare or appear to modify other skills or system-wide agent settings.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install qweather-china - After installation, invoke the skill by name or use
/qweather-china - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.2.2
Security compliance update: complete env vars declaration, detailed permissions, placeholder config values
v1.2.1
Security fix v1.2.1: use isolated credential path (~/.config/qweather/), add skill.yaml for ClawHub, support environment variables, fix permission declarations
v1.3.1
添加ClawHub标签: weather, china, utility, qweather
v1.3.0
安全性增强：添加.gitignore、LICENSE、配置模板；完善权限声明；跨平台路径优化
v1.2.0
### v1.2.0
- 重写 Skill 说明文档，突出“国内天气预报 - 和风天气(QWeather)驱动”定位
- 移除所有敏感API信息，增强隐私安全与合规性
- 统一编码为“UTF-8 without BOM”，修复相关编码问题
- 删除无关开发文件与示例（如配置、示例、测试文件等）
- 新增编码工具、地点处理与自然语言修正相关功能模块
v1.1.0
Version 1.1.0
- Enhanced natural language support: expanded query types, improved intent and location recognition, and added more flexible natural input patterns.
- Improved user experience documentation with clearer descriptions of advanced features and supported queries.
- Added new test file (test_enhanced_features.py) to validate enhanced feature coverage.
v1.0.0
QWeather China Skill v1.0.0 发布日志
- 首次发布，集成和风天气V7全套API，覆盖中国及全球主要城市
- 支持实时天气、各类天气预报、生活指数、空气质量、天气预警、天文与历史数据等全方位查询
- 优化数据处理，支持拼音、城市代码、经纬度及中文名检索，提升中国用户体验
- 内置缓存与错误降级机制，API调用高效稳定
- 环境变量与.env文件配置，保护敏感信息
- 提供详细文档及OpenClaw自然语言集成示例
Metadata
Frequently Asked Questions
What is QWeather China?
基于中国气象局数据的完整天气服务，通过和风天气API提供实时天气、天气预报、生活指数、空气质量等全方位天气信息。专为中国用户优化，数据更准确，功能更全面。 It is an AI Agent Skill for Claude Code / OpenClaw, with 369 downloads so far.
How do I install QWeather China?
Run "/install qweather-china" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is QWeather China free?
Yes, QWeather China is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does QWeather China support?
QWeather China is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created QWeather China?
It is built and maintained by uni-huang (@uni-huang); the current version is v1.2.2.
More Skills