skills/wanikua/danghuangshang/weather/Gen Agent Trust Hub

weather

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [DATA_EXFILTRATION]: The skill performs standard network operations to fetch weather data from established public services.
  • Fetches current weather and forecasts from the official wttr.in domain.
  • Fetches programmatic weather data from the api.open-meteo.com domain.
  • Demonstrates downloading weather charts from wttr.in to the local /tmp/ directory.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data from external weather APIs which serves as a potential attack surface for indirect prompt injection.
  • Ingestion points: Data returned from wttr.in and api.open-meteo.com is processed by the agent.
  • Boundary markers: There are no explicit markers or instructions to the agent to treat external content as untrusted data.
  • Capability inventory: The skill utilizes curl for network access and allows writing files to temporary storage.
  • Sanitization: The examples do not include sanitization or validation of the weather data received from the remote services.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 01:53 PM