スキル taiwan-weather
📦
taiwan-weather
コンテンツリビジョン r1 安全 ⚙️ 外部コマンド🌐 ネットワークアクセス📁 ファイルシステムへのアクセス
Check Taiwan Weather and Disaster Alerts
Taiwan weather checks can require API keys or separate searches for forecasts and disaster alerts. This skill guides keyless Open-Meteo queries and NCDR alert lookups with location and timestamp checks.
対応: Claude Codex Code(CC)
自分のエージェントでインストール
このリクエストをエージェントにコピーしてください。正規の Skill ページとマニフェストが含まれています。
エージェントリクエスト
Review the Skillstore skill "taiwan-weather" from https://skillstore.io/skills/tahodev-taiwan-weather.md and its manifest at https://skillstore.io/api/skills/tahodev-taiwan-weather/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.エージェントは引き続き計画を提示し、セキュリティポリシーで必要な確認を求める必要があります。
エージェントが読めるリソース
AI エージェント、クローラー、スクリプトがページ全体ではなく整理されたコンテキストを必要とする場合は、これらのリンクを使ってください。
テストする
「taiwan-weather」を使用しています。 What is the current weather in Taipei?
期待される結果:
- Illustrative example only, not live weather data.
- Location: Taipei. Source: Open-Meteo.
- Returned local time: 2026-09-09 10:00 Asia/Taipei.
- Temperature: 28 C. Humidity: 70%. Precipitation: 0 mm. Wind speed: 8 km/h.
- Weather: partly cloudy. These are model-based conditions, not an official CWA forecast.
「taiwan-weather」を使用しています。 Is there an active typhoon warning?
期待される結果:
- Illustrative failure response.
- The NCDR typhoon feed could not be retrieved, so I cannot verify active alerts.
- A failed request does not mean there are no warnings.
- Check current Central Weather Administration announcements before making safety decisions.
セキュリティ監査
安全v1 • 2026/10/13 バージョン別レポートを開く
Markdown backticks, public weather URLs, and readable Chinese documentation explain the command, network, and entropy false positives. Two filesystem findings confirm shared temporary-file risks: symlink-based overwrite and local alert-data substitution. No evidence found of prompt injection, credential theft, or intentional data exfiltration.
1
スキャンされたファイル
151
解析済み行数
2
レビュー項目
0
誤検知を無視
機能レビュー項目 (2)
これらは、このスキルに期待される可能性のある実際のローカル機能であるため、レビューが必要ですが、確認済みの悪意ある動作としてはカウントされません。
中
Temp directory access
curl -sm 30 'https://alerts.ncdr.nat.gov.tw/RssAtomFeed.ashx?AlertType=5' -o /tmp/typhoon.xml
curl writes to the predictable shared path /tmp/typhoon.xml without exclusive creation. A local attacker can pre-create a symlink to overwrite another writable file.
中
Temp directory access
h = open('/tmp/typhoon.xml', encoding='utf-8').read()
The parser trusts the same predictable shared path without binding the read to a verified download. Local substitution can feed forged alert text into reporting.
リスク要因
⚙️ 外部コマンド (18)
🌐 ネットワークアクセス (6)
📁 ファイルシステムへのアクセス (2)
監査者: codex
このレポートを共有・引用
バージョン付き評価レポート、中立的なバッジ、埋め込みカード、引用を共有できます。Skillstore は証拠を報告しますが、この Skill が安全かどうかは判断しません。
レポートリンクをコピー
https://skillstore.io/skills/tahodev-taiwan-weather/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdownバッジ
[](https://skillstore.io/skills/tahodev-taiwan-weather?utm_source=security_passport_badge)HTMLバッジ
<a href="https://skillstore.io/skills/tahodev-taiwan-weather?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/tahodev-taiwan-weather/security.svg" alt="Skillstore security assessment" loading="lazy"></a>埋め込みカード
<iframe src="https://skillstore.io/embed/skills/tahodev-taiwan-weather.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>学術引用 (APA · BibTeX · CFF)
APA形式の引用
tahodev. (2026). taiwan-weather security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/tahodev-taiwan-weather/audits/1BibTeX形式の引用
@techreport{tahodev-tahodev-taiwan-weather-2026,
author = {tahodev},
title = {taiwan-weather security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/tahodev-taiwan-weather/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "taiwan-weather security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "tahodev"
date-released: "2026-10-13"
url: "https://skillstore.io/skills/tahodev-taiwan-weather/audits/1"
identifiers:
- type: other
value: "skillstore:tahodev-taiwan-weather:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore スコア
このスコアの理由 証拠の信頼度: 中 55
アーキテクチャ
85
保守性
87
コンテンツ
65
コミュニティ
83
仕様準拠
作成できるもの
Check Commuting Conditions
Check current temperature, precipitation, and wind for a Taiwan city before commuting.
Compare Short Travel Forecasts
Compare three-day temperature ranges and rain probabilities for planned destinations, with verified coordinates.
Review Public Disaster Alerts
Retrieve relevant NCDR feeds, review publication and expiration times, and consult authoritative announcements before operational decisions.
これらのプロンプトを試す
Current City Weather
Check current weather in Taipei. Include temperature, humidity, precipitation, wind, source, and the returned Asia/Taipei timestamp.
Three-Day Forecast
Show the next three forecast days for Kaohsiung. Include weather descriptions, temperature ranges, rain probabilities, and the Open-Meteo source.
Verify a Smaller Destination
Find Lugang using English geocoding. Verify country_code TW and the administrative area before giving its three-day forecast. Report any ambiguity.
Review Multiple Alert Types
Check NCDR typhoon, rainfall, and flood feeds. Space requests by three seconds and use private temporary files. Verify update and expiration timestamps. Report failures and defer official decisions to authoritative announcements.
ベストプラクティス
- Verify Taiwan coordinates and include the returned local timestamp and data source in weather reports.
- Use private temporary files for alert downloads, verify retrieval success, and check publication and expiration times.
- Space NCDR requests by at least three seconds and use authoritative announcements for safety decisions.
回避
- Presenting Open-Meteo model forecasts as official CWA forecasts.
- Guessing coordinates or accepting ambiguous geocoding results without checking Taiwan location details.
- Reporting expired alerts, stale files, or failed requests as current conditions.
よくある質問
Does this skill require an API key?
The documented Open-Meteo and NCDR public queries require no API key or login.
Are these official Taiwan weather forecasts?
No. Open-Meteo uses international weather models. Use CWA announcements or the separate cwa-weather skill for official forecasts.
Which locations are included?
The skill lists coordinates for 22 Taiwan counties and cities, plus Kenting and Puli. Additional locations require verified geocoding.
Can I search using Chinese place names?
The skill documents unsuccessful Chinese-name geocoding tests and recommends English or pinyin. Verify the returned country and administrative area.
Which disaster alerts can it query?
NCDR feed examples cover typhoons, earthquakes, tsunamis, floods, debris flows and major landslides, rainfall, and high river levels.
What happens when a request fails?
The instructions limit retries and require reporting failure rather than inventing weather. Failed alert retrieval cannot establish that no warnings exist.
開発者情報
作成者
tahodevライセンス
MIT
Skillstore リビジョン
r1
バージョンに関する注意
作者はバージョンを宣言していません。
リポジトリ
https://github.com/tahodev/baodao-skill/tree/3ce4b58e4525f5a66390e1236b6d38702790225a/taiwan-weather参照
2aab20a3878daa05021884e089a7dd7739e08581
メンテナンスの新しさ
2026/10/13
利用状況
0 ダウンロード · 0 閲覧
ファイル構成
📄 SKILL.md