The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill uses WebFetch to request data from Open-Meteo (open-meteo.com), a well-known service for free weather APIs. These requests are used solely for retrieving geocoding and forecast information based on user queries.
[INDIRECT_PROMPT_INJECTION]: The skill ingests external data from user locations and API responses. However, because the skill lacks high-risk capabilities (such as shell execution, file-writing, or access to sensitive credentials), the attack surface for indirect prompt injection is minimal and does not present a significant security risk.
[SAFE]: No hardcoded credentials or sensitive file paths (e.g., .env, .ssh) are accessed or exposed by the skill. The Open-Meteo API endpoints used do not require authentication tokens, further reducing the risk of credential exposure.
[SAFE]: All instructions and referenced materials, such as references/clothing_guide.md, are transparent, human-readable, and serve the primary purpose of the skill without hidden or obfuscated content.

weather