qweather
Fail
Audited by Socket on Mar 10, 2026
1 alert found:
Obfuscated FileObfuscated FileSKILL.md
HIGHObfuscated FileHIGH
SKILL.md
The skill’s stated purpose (weather querying via QWeather) is coherently supported by its workflow: city lookup followed by real-time/forecast/indices API calls, with credentials supplied via environment variables. No suspicious or unverifiable download/install patterns are present, and data flows are confined to official API endpoints. Overall, the skill is benign and appropriately scoped to its stated function.
Confidence: 98%
Audit Metadata