Is skills/weather safe?

https://github.com/openclaw/openclaw/tree/main/skills/weather

98
SAFE

This is a straightforward weather information skill that provides curl commands to fetch weather data from the legitimate wttr.in service. The skill contains no malicious code, prompt injection attempts, or data exfiltration mechanisms.

Category Scores

Prompt Injection 100/100 · 30%
Data Exfiltration 100/100 · 25%
Code Execution 100/100 · 20%
Clone Behavior 100/100 · 10%
Canary Integrity 100/100 · 10%
Behavioral Reasoning 90/100 · 5%

Findings (1)

INFO External Service Dependency -10

The skill relies on the external service wttr.in for weather data. While wttr.in is a legitimate and well-known weather service, this introduces a dependency on external infrastructure.