weather-fetcher
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill retrieves weather information from
api.open-meteo.com. Open-Meteo is a well-known, public, and reputable service for weather data.- [INDIRECT_PROMPT_INJECTION]: The skill interacts with data from an external source, which represents a standard injection surface. - Ingestion points: The skill processes JSON responses fetched via the
WebFetchtool from the Open-Meteo API (SKILL.md). - Boundary markers: The instructions explicitly direct the agent to extract specific numeric fields (
current.temperature_2m) from the structured JSON response, which provides a natural boundary. - Capability inventory: The skill utilizes the
WebFetchtool for data retrieval; no file-writing or command execution capabilities are present. - Sanitization: While no explicit sanitization is described, the narrow scope of data extraction (specific JSON paths) minimizes the risk of processing unintended instructions.
Audit Metadata