weatherkit
Fail
Audited by Socket on Mar 8, 2026
1 alert found:
Obfuscated FileObfuscated FileSKILL.md
HIGHObfuscated FileHIGH
SKILL.md
The WeatherKit-based skill demonstrates coherent purpose-capability alignment: it outlines standard usage of WeatherKit for current, hourly, and daily weather data, alerts, and attribution with appropriate location handling. There is no evidence of unverifiable binaries, credential harvesting, data exfiltration, or misuse of credentials. The install/execution model relies on official Apple WeatherKit APIs and entitlements rather than external binaries or credential-forwarding mechanisms. Overall, the footprint is benign and proportionate to its stated weather-data integration purpose.
Confidence: 98%
Audit Metadata