📦

heatstroke

Name: heatstroke
Author: tahodev

Inhaltsrevision r1 Mittleres Risiko 🌐 Netzwerkzugriff📁 Dateisystemzugriff⚙️ Externe Befehle

Check Japan Heat Risk with WBGT Data

Heat-risk planning requires location-specific readings with clear timestamps. This skill retrieves Japanese government WBGT forecasts and observations, matches stations, and presents five risk categories.

Unterstützt: Claude Codex Code(CC)

📊 68 Angemessen

Maintain this Skill? Claim it 📊 68 Angemessen

Mit meinem Agent installieren

Kopieren Sie diese Anfrage in Ihren Agent. Sie enthält die maßgebliche Skill-Seite und das Manifest.

Agent-Anfrage

Review the Skillstore skill "heatstroke" from https://skillstore.io/skills/tahodev-heatstroke.md and its manifest at https://skillstore.io/api/skills/tahodev-heatstroke/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Ihr Agent sollte weiterhin seinen Plan anzeigen und alle von der Sicherheitsrichtlinie verlangten Bestätigungen anfordern.

Agent-lesbare Ressourcen

Verwenden Sie diese Links, wenn ein KI-Agent, Crawler oder Skript sauberen Kontext benötigt, statt die vollständige Seite zu lesen.

Markdown-Detailseite GET /skills/tahodev-heatstroke.md Signiertes manifest GET /api/skills/tahodev-heatstroke/manifest Signiertes lockfile GET /api/skills/tahodev-heatstroke/lockfile

Testen

„heatstroke“ wird verwendet. Explain the documented Tokyo forecast example.

Erwartetes Ergebnis:

Documented historical example: Tokyo, station 44132.
Announcement: 2026-09-25 17:00 JST. Forecast time: 2026-09-25 18:00 JST.
WBGT: 21.0 degrees Celsius after dividing the source value by ten. Category: caution.
This historical example does not describe current conditions.

„heatstroke“ wird verwendet. Interpret the documented Tokyo observation example.

Erwartetes Ergebnis:

Documented historical example: Tokyo, 2026-09-01 00:00 JST.
Outdoor WBGT: 21.9 degrees Celsius. Category: caution.
One observation cannot establish the daily maximum or current heat risk.

Sicherheitsaudit

Mittleres Risiko

v1 • 13.10.2026 Versionsbericht öffnen

All 70 static findings are false positives involving public API access, documented cache storage, Markdown syntax, or readable Japanese text. No evidence found of prompt injection, credential access, or unauthorized data exfiltration. Two semantic findings identify host-timezone errors and misleading safe classifications when observations contain no valid values.

Gescannte Dateien

327

Analysierte Zeilen

Prüfelemente

Falschmeldungen ignoriert

Bestätigte Sicherheitsbedenken (2)

Mittel

lookup.py:70-77 lookup.py:94-98 lookup.py:107-111 SKILL.md:106

Host Timezone Can Select Stale Heat Forecasts

Default forecast announcements and survey dates use naive host-local timestamps, although the API expects JST. Non-JST hosts can retrieve older forecasts or the wrong observation date, misleading heat-risk decisions.

The helper uses datetime.now() without timezone conversion. A local check selected the previous day's 17:00 announcement at 03:30 UTC, instead of the current day's 11:00 JST announcement.

Mittel

lookup.py:116-125 lookup.py:25-30

Missing Observations Produce a Misleading Safe Maximum

The survey maximum starts at zero and remains zero when every outdoor reading is missing or nonnumeric. The summary then labels the day safe despite having no valid observations, potentially encouraging unsafe heat exposure.

A mocked survey containing an empty outdoor reading produced a 0.0 maximum with the safe category. The code does not track whether any valid observations exist.

Risikofaktoren

🌐 Netzwerkzugriff (15)

lookup.py:20 lookup.py:36 lookup.py:81 lookup.py:12 lookup.py:21 lookup.py:22 lookup.py:14 SKILL.md:20 SKILL.md:21 SKILL.md:22 SKILL.md:23 SKILL.md:27 SKILL.md:32 SKILL.md:42 SKILL.md:60

📁 Dateisystemzugriff (9)

lookup.py:9 lookup.py:16 lookup.py:9 lookup.py:16 lookup.py:36 lookup.py:33 SKILL.md:82 SKILL.md:100 SKILL.md:100

⚙️ Externe Befehle (30)

Geprüft von: codex

Diesen Bericht teilen & zitieren

Teile den versionierten Bewertungsbericht, das neutrale Badge, die Einbettungskarte und Zitate. Skillstore berichtet Nachweise, ohne zu entscheiden, ob dieser Skill sicher ist.

Versionsbericht öffnen

Berichtslink kopieren

https://skillstore.io/skills/tahodev-heatstroke/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown-Badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/tahodev-heatstroke/security.svg)](https://skillstore.io/skills/tahodev-heatstroke?utm_source=security_passport_badge)

HTML-Badge

<a href="https://skillstore.io/skills/tahodev-heatstroke?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/tahodev-heatstroke/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Einbettungskarte

<iframe src="https://skillstore.io/embed/skills/tahodev-heatstroke.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Wissenschaftliche Zitate (APA · BibTeX · CFF)

APA-Zitat

tahodev. (2026). heatstroke security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/tahodev-heatstroke/audits/1

BibTeX-Zitat

@techreport{tahodev-tahodev-heatstroke-2026,
  author = {tahodev},
  title = {heatstroke security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/tahodev-heatstroke/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "heatstroke security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "tahodev"
date-released: "2026-10-13"
url: "https://skillstore.io/skills/tahodev-heatstroke/audits/1"
identifiers:
  - type: other
    value: "skillstore:tahodev-heatstroke:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore-Score

Warum dieser Score Evidenzvertrauen: Mittel

Architektur

Wartbarkeit

Inhalt

Gemeinschaft

Spezifikationskonformität

Was Sie erstellen können

Review Event Heat Conditions

Retrieve a nearby station forecast before an outdoor event and review timestamps alongside official activity guidance.

Inspect Workplace Heat Observations

Review a selected station's daily outdoor WBGT readings and risk categories without treating regional data as an onsite measurement.

Research Local Heat Patterns

Find station identifiers and retrieve dated forecasts or observations for comparisons using the documented public API.

Diese Prompts ausprobieren

Find a Station

Find stations with names containing Tokyo. Show their identifiers and whether measured observations are available. Use the Japanese station name if needed.

Review a Station Forecast

Retrieve the next 24 hours of WBGT forecasts for station 44132. Include JST announcement and forecast times, converted values, and risk categories.

Inspect Daily Observations

Retrieve station 44132 observations for 2026-09-01. Show hourly outdoor readings and risk categories. Report a daily maximum only when valid readings exist.

Validate a Nearby Forecast

Find the nearest station to latitude 35.68, longitude 139.69. Verify the latest JST announcement explicitly and summarize forecast risk, distance, and data limitations.

Bewährte Praktiken

Include station identity, observation or forecast time, and JST announcement time in every result.
Validate API status and available readings; distinguish missing data from low heat risk.
Confirm JST dates explicitly on non-JST hosts and consult official activity guidance before making safety decisions.

Vermeiden

Presenting historical forecasts or empty responses as current conditions.
Treating a missing-data zero maximum as proof that outdoor activity is safe.
Using JIS prefecture codes as API prefecture identifiers instead of resolving station numbers.

Häufig gestellte Fragen

Do I need an API key or account?

No. The documented Japanese government WBGT API provides public data without an API key, login, or registration.

Which locations are covered?

The documented station master contains 865 locations across Japan. Search station names or supply coordinates to choose a nearby station.

How frequently are forecasts published?

The skill documents announcements at 05:00, 11:00, and 17:00 JST, with forecast values in three-hour intervals.

Where does the helper store data?

It caches station metadata in ~/.cache/kurashi-skill/heatstroke/. The refresh option downloads a new station master; forecasts and observations require API requests.

What does an empty response mean?

Data may be unavailable outside the service season, delayed, or requested for an incorrect announcement time. Empty results do not indicate safe conditions.

Can this determine whether exercise is safe?

No. WBGT is a general heat-risk indicator, not individual medical advice. Consult official activity guidance and verify valid readings and timestamps.