china-weather
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions provide curl commands to interact with wttr.in, an established and well-known command-line weather utility.
- [INDIRECT_PROMPT_INJECTION]: The skill consumes data from an external source (wttr.in), which creates a surface for indirect prompt injection.
- Ingestion points: Output from curl queries to wttr.in as defined in SKILL.md.
- Boundary markers: Not explicitly defined in the instructions.
- Capability inventory: Network access via curl is utilized to fetch the data.
- Sanitization: The skill does not define specific sanitization or validation for the weather service output.
Audit Metadata