weather
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches weather information from external services wttr.in and api.open-meteo.com which are common public weather data providers.
- [COMMAND_EXECUTION]: The skill utilizes the curl utility to perform HTTP requests and provides an example of saving a weather image to the /tmp directory.
- [PROMPT_INJECTION]: The skill processes external data from third-party APIs which presents a surface for indirect prompt injection. 1. Ingestion points: Response data from wttr.in and api.open-meteo.com. 2. Boundary markers: None specified in the instructions. 3. Capability inventory: Shell command execution via curl. 4. Sanitization: No explicit validation or filtering of API responses is defined.
Audit Metadata