qweather

Fail

Audited by Socket on Mar 10, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The skill’s stated purpose (weather querying via QWeather) is coherently supported by its workflow: city lookup followed by real-time/forecast/indices API calls, with credentials supplied via environment variables. No suspicious or unverifiable download/install patterns are present, and data flows are confined to official API endpoints. Overall, the skill is benign and appropriately scoped to its stated function.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 10, 2026, 02:21 AM
Package URL
pkg:socket/skills-sh/deusyu%2Frainman-skills%2Fqweather%2F@9485ea0c7aa4d5bd8fd830394819595bf5cf8392