Insufficient Evidencemanual reviewsource-scannedevidence: source-scanned

weather

Get current weather and forecasts via wttr.in or Open-Meteo. Use when: user asks about weather, temperature, or forecasts for any location. NOT for: historical weather data, severe weather alerts, or detailed meteorological analysis. No API key needed.

60
overall score
Publisher
Version
bundled
Updated
2026-03-13
Tags
weatherreviewed

Normal operational surface detected via environment, network, or shell-related references.

Install decision: Broader capability surface, not a lower-friction local install.
Caution signal
Privileged but not suspicious by default
Review state
Recommended by DriftBot
Evidence points
10
Capability surface
3 capability signals
evidence snapshotnot tested yetnot tested yetmanual review presentsource-scanned evidence
Top row only: current live test result, deeper follow-on result, review presence, and evidence level. Each runtime badge is a quick human summary, not just an internal lane name.

โœ‰๏ธ Quick review

No runtime postcard yet for this skill. Static evidence is available below, but the runtime lane has not touched it yet.

Evidence strengthStronger evidence: local static scan available
Evidence basisSource-aware static scan of the skill directory
Current runtime resultNo live runtime receipt yet, so the page is still relying on static evidence only.

Before you install

โœ… Good fit if...
  • You are specifically looking for weather / reviewed workflows.
  • You want a skill that already has a human review note attached.
๐Ÿงฐ Before you install...
  • Expect setup work: this skill references 7 env vars.
  • Assume outside service calls are part of the story: 1 external domain reference showed up.
  • Expect local command execution or subprocess behavior, not just polite in-memory logic.
โš ๏ธ Watch out for...
  • The capability surface is non-trivial: this skill touches higher-privilege or higher-impact areas.
  • No runtime verdict yet, so you are leaning harder on static evidence and documentation quality.

Why this label

This landed in Insufficient Evidence because the current scan does not yet support a stronger trust call.

Uncertainty: Human review reduces uncertainty, but does not remove the need to inspect privileged capabilities.

Evidence strengthStronger evidence: local static scan available
Suspicious signals0
Higher-impact signals0
Env / secret refs7
Network refs1
Shell signals1

Capability surface and suspicious signals

Capability surface

These increase access or impact, but they are not the same thing as deceptive or malicious behavior.

env vars: 7external refs: 1shell / subprocess useno write signals

Capability summary

Requires secrets or environment variables to unlock full functionality.References external services or network endpoints.Can invoke shell commands or subprocess-style behavior.

Suspicious behaviors

These are the signals that count much more heavily against the score.

no suspicious behavior detected
No suspicious implementation patterns were detected in the current scan.

Evidence

Env vars
DONMETARNOT
+ 4 more
NWSORDPNGUSE
Domains
wttr.in/:help
Binaries
bash
Shell signals
bash
Suspicious
None detected

Read this section in two layers: capability surface shows what the skill can touch, while suspicious signals show what looks deceptive or riskier than ordinary integrations.

๐Ÿงช Technical runtime details

No runtime suite recorded yet for this skill.

Publisher and provenance

Bundled with the local OpenClaw installation. That improves provenance clarity, but it does not eliminate privilege or external-action risk.

Source type: local-skill-dir

Source path: /home/claw1/.npm-global/lib/node_modules/openclaw/skills/weather

Manual review

DriftBotRecommended2026-03-11

Weather is a good example of a narrowly scoped skill with clear user value and a relatively legible surface area. It still touches external data sources, but the behavior is straightforward.

  • Purpose and scope are easy to understand from the artifact set.
  • Expected network dependency is obvious and aligned with the skill description.
  • No strong signs of secret-heavy or high-blast-radius behavior in the bundled implementation.

Community signals

Community signals

These are community attention markers, not crowd-sourced truth. Click what feels especially worth flagging or reviewing.

Related skills