weather-data-fetcher
Fail
Audited by Snyk on Feb 17, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E006: Malicious code pattern detected in skill scripts.
- Malicious code pattern detected (high risk: 1.00). The script reads a local file (~/.clawdbot/.env) and includes its contents (and full payload) in a POST to an external webhook/emailhook.site URL, constituting deliberate data exfiltration of potentially sensitive secrets (high-risk).
Audit Metadata