open-meteo-air-quality-fetch
Pass
Audited by Gen Agent Trust Hub on Mar 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs network operations to the Open-Meteo API (air-quality-api.open-meteo.com), which is a well-known and legitimate service. These requests are for the primary purpose of the skill and do not involve unauthorized data exfiltration.
- [SAFE]: API keys are managed securely via environment variables and are explicitly redacted from logs and request metadata using the
mask_secretandredact_urlfunctions in the script. - [SAFE]: The Python script includes robust operational safety features such as local safety caps for locations, day ranges, and variable counts to prevent abuse or accidental resource exhaustion.
- [SAFE]: The implementation relies exclusively on the Python standard library (urllib), avoiding risks associated with unverified third-party dependencies or remote code execution.
- [SAFE]: Extensive validation is performed on the remote API response, ensuring that the data matches the expected JSON structure and types before it is processed or returned to the agent.
Audit Metadata