weather
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill performs network requests to well-known weather services (wttr.in and open-meteo.com) using curl. These operations are transparent and aligned with the skill's stated purpose of providing weather forecasts.
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external APIs, which technically introduces an ingestion surface for untrusted data. However, the risk is considered negligible for weather reports.
- Ingestion points: Output from curl commands in SKILL.md.
- Boundary markers: No specific delimiters or instructions to ignore embedded content are provided.
- Capability inventory: Includes network read access via curl and the ability to save an image file to disk.
- Sanitization: No explicit sanitization or validation of the weather data is performed within the skill instructions.
Audit Metadata