Scan Report
0 /100
weather-wttr.in
Get weather data from wttr.in free service
This is a legitimate weather data skill using only stdlib to query wttr.in. No security issues detected; code behavior matches documentation exactly.
Safe to install
Skill is safe to use as-is. No changes needed.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Filesystem | NONE | NONE | — | No file operations in weather.py |
| Network | READ | READ | ✓ Aligned | weather.py:60-74 - urllib GET to wttr.in only |
| Shell | NONE | NONE | — | No subprocess or shell commands |
| Environment | NONE | NONE | — | No os.environ access |
| Skill Invoke | NONE | NONE | — | No inter-skill invocation |
| Clipboard | NONE | NONE | — | No clipboard access |
| Browser | NONE | NONE | — | No browser automation |
| Database | NONE | NONE | — | No database operations |
File Tree
2 files · 9.3 KB · 279 lines Python 1f · 233L
Markdown 1f · 46L
├─
▾
scripts
│ └─
weather.py
Python
└─
SKILL.md
Markdown
Security Positives
✓ Uses only Python stdlib (urllib, json, sys) - no external dependencies
✓ No shell execution or subprocess calls
✓ No credential harvesting or environment variable access
✓ No file read/write operations
✓ No obfuscation or base64-encoded code
✓ Network access limited to legitimate weather API (wttr.in)
✓ Code behavior matches SKILL.md documentation exactly
✓ No supply chain risks - no pip packages or external dependencies