weather
Pass
Audited by Gen Agent Trust Hub on Mar 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes 'curl' to interact with remote weather services.
- [EXTERNAL_DOWNLOADS]: The skill downloads weather information from 'wttr.in' and 'api.open-meteo.com', which are legitimate public services.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it processes external content.
- Ingestion points: Data retrieved from 'wttr.in' and 'api.open-meteo.com'.
- Boundary markers: None present in the skill instructions.
- Capability inventory: Network access via 'curl' and file system access to '/tmp'.
- Sanitization: No content validation is performed on the downloaded data.
Audit Metadata