weather-query
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill makes network requests to
https://60s.viki.moe/v2to fetch weather data. This domain is associated with the skill author's infrastructure (vikiboss). - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from an external API response and user-supplied location queries.
- Ingestion points: External API responses from
60s.viki.moeand thequeryparameter in Python/Bash scripts. - Boundary markers: None present; data is directly interpolated into strings for output.
- Capability inventory: Limited to network GET requests and standard output (print). No file system write, subprocess execution, or remote code execution capabilities identified.
- Sanitization: None explicitly implemented for the weather data display, but the scope is limited to informational weather content.
Audit Metadata