weather
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill performs standard network operations to fetch weather data from established public services.
- Fetches current weather and forecasts from the official
wttr.indomain. - Fetches programmatic weather data from the
api.open-meteo.comdomain. - Demonstrates downloading weather charts from
wttr.into the local/tmp/directory. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from external weather APIs which serves as a potential attack surface for indirect prompt injection.
- Ingestion points: Data returned from
wttr.inandapi.open-meteo.comis processed by the agent. - Boundary markers: There are no explicit markers or instructions to the agent to treat external content as untrusted data.
- Capability inventory: The skill utilizes
curlfor network access and allows writing files to temporary storage. - Sanitization: The examples do not include sanitization or validation of the weather data received from the remote services.
Audit Metadata