oathe
Oathe Security Badge

Is skills/weather safe?

Yes. skills/weather is safe to install. Oathe's behavioral security audit gave the weather skill by skills a trust score of 98/100 with 1 finding, none critical or high. Report updated

https://github.com/openclaw/openclaw/tree/main/skills/weather

98
SAFE

Is skills/weather safe to install?

This is a straightforward weather information skill that provides curl commands to fetch weather data from the legitimate wttr.in service. The skill contains no malicious code, prompt injection attempts, or data exfiltration mechanisms.

What security issues were found in skills/weather?

Category Scores

Prompt Injection 100/100 · 30%
Data Exfiltration 100/100 · 25%
Code Execution 100/100 · 20%
Clone Behavior 100/100 · 10%
Canary Integrity 100/100 · 10%
Behavioral Reasoning 90/100 · 5%

Findings (1)

INFO External Service Dependency -10 ▶

The skill relies on the external service wttr.in for weather data. While wttr.in is a legitimate and well-known weather service, this introduces a dependency on external infrastructure.

Should I install skills/weather?

Oathe's verdict for skills/weather is SAFE with a trust score of 98/100. Recommendation: Install.