pp-open-meteo
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads and installs its own CLI tool and MCP server from the author's GitHub repository (
github.com/mvanhorn/printing-press-library). This is a standard installation procedure for the vendor's provided tooling. - [COMMAND_EXECUTION]: The skill executes the
open-meteo-pp-cliandopen-meteo-pp-mcpbinaries to perform weather queries and server registration. These operations are scoped to the primary purpose of the skill. - [REMOTE_CODE_EXECUTION]: Uses
go installandnpxto fetch and install the required tools. These are performed from the vendor's official repositories and packages, which is consistent with the skill's intended deployment model. - [DATA_EXFILTRATION]: While the skill includes a
--deliver webhook:<url>feature, this is an explicit user-controlled configuration for routing command output and is not used for silent data exfiltration. The API interactions are read-only and target a public weather service.
Audit Metadata