weather
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
curlto fetch weather information fromwttr.inandapi.open-meteo.com. These are well-known, established public services providing weather data. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external web services, which represents a potential attack surface if those services were compromised to serve malicious instructions.
- Ingestion points: Network responses from
wttr.inandapi.open-meteo.com(SKILL.md). - Boundary markers: None identified; output is processed directly by the agent.
- Capability inventory: The agent has access to
curlas specified in the metadata. - Sanitization: No specific escaping or validation of the remote content is defined in the instructions.
Audit Metadata