connector-weatherapi

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides documentation and Motoko code snippets for interacting with WeatherAPI.com using a standard client library. The implementation follows standard patterns for Motoko-based canisters.
  • [CREDENTIALS_SAFE]: The skill explicitly advises users to never hard-code API keys in the source code. Instead, it correctly recommends storing credentials in stable variables that are updated via administrative calls, which is a security best practice for managing secrets in blockchain environments.
  • [EXTERNAL_DOWNLOADS]: The skill references the weatherapi-client package from the mops registry (Motoko Package Manager). This is a standard dependency for the Motoko ecosystem and is used here for its intended purpose of providing API bindings.
  • [COMMAND_EXECUTION]: There are no shell commands, subprocess invocations, or privilege escalation patterns detected in the instructions or example code.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 09:23 AM
Security Audit — agent-trust-hub — connector-weatherapi