weather

Pass

Audited by Gen Agent Trust Hub on Aug 19, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses curl to fetch weather information from wttr.in and api.open-meteo.com. These are well-known, established public services providing weather data.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external web services, which represents a potential attack surface if those services were compromised to serve malicious instructions.
  • Ingestion points: Network responses from wttr.in and api.open-meteo.com (SKILL.md).
  • Boundary markers: None identified; output is processed directly by the agent.
  • Capability inventory: The agent has access to curl as specified in the metadata.
  • Sanitization: No specific escaping or validation of the remote content is defined in the instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 19, 2026, 07:45 PM
Security Audit — agent-trust-hub — weather