weather

Fail

Audited by Socket on Mar 11, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The weather skill aligns with its stated purpose: it fetches weather data from public services without requiring API keys and returns concise JSON-ready outputs. There are no credential or data-harvesting signals, no suspicious download/execute patterns, and network interactions are limited to legitimate weather endpoints. Overall, the footprint is benign with respect to security risk, given the described functionality and normal dependencies (Python script and curl).

Confidence: 98%
Audit Metadata
Analyzed At
Mar 11, 2026, 04:20 PM
Package URL
pkg:socket/skills-sh/countbot-ai%2FCountBot%2Fweather%2F@d69d1f245f023951d635bf867d0a42ea99aed36f
Security Audit — socket — weather