스킬 connector-weatherapi
📦

connector-weatherapi

v0.2.0 콘텐츠 리비전 r1 중간 위험 ⚙️ 외부 명령어🌐 네트워크 접근

Connect Motoko Apps to WeatherAPI

Weather integrations need correct Motoko bindings, authentication, and outcall settings. This skill provides a focused WeatherAPI client workflow with typed response guidance.

지원: Claude Codex Code(CC)
Maintain this Skill? Claim it 📊 72 적절함

내 에이전트로 설치

이 요청을 에이전트에 복사하세요. 공식 Skill 페이지와 매니페스트가 포함되어 있습니다.

에이전트 요청
Review the Skillstore skill "connector-weatherapi" from https://skillstore.io/skills/caffeinelabs-connector-weatherapi.md and its manifest at https://skillstore.io/api/skills/caffeinelabs-connector-weatherapi/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

에이전트는 계속해서 계획을 표시하고 보안 정책에서 요구하는 확인을 요청해야 합니다.

에이전트가 읽기 쉬운 리소스

AI 에이전트, 크롤러, 스크립트가 전체 페이지 대신 정리된 컨텍스트만 필요할 때 이 링크를 사용하세요.

테스트해 보기

"connector-weatherapi" 사용 중입니다. Request a current temperature function for Zurich.

예상 결과:

A Motoko canister function that calls the generated realtime weather client, reads the optional temperature field, and returns an optional number.

"connector-weatherapi" 사용 중입니다. Ask why the default outcall is non-replicated.

예상 결과:

A concise explanation that weather timestamps change between requests, so replicated calls can produce different response bodies and fail consensus.

"connector-weatherapi" 사용 중입니다. Ask which operations need a paid plan.

예상 결과:

  • History, future, marine, and longer forecasts may require a paid plan.
  • Free-plan calls to restricted operations can return HTTP 403.

보안 감사

중간 위험
v1 • 2026. 9. 18. 버전별 보고서 열기

The static analyzer misclassified Markdown backticks, code examples, API names, and documentation URLs as security risks. The skill does document an API key in a query string, which creates credential exposure risk if request URLs enter logs or intermediary systems.

1
스캔된 파일
131
분석된 줄 수
0
검토 항목
0
오탐 무시됨

확인된 보안 우려 사항 (1)

중간
Credential Exposure Through Query-String Authentication
The skill says the API key appears in the request URL. Query strings can be captured by proxy, gateway, or application logs, exposing the credential.
Lines 84-87 explicitly describe query-string authentication and URL visibility. The exposure risk is inherent to URL-based credentials, even though the skill advises against logging URLs.
감사자: codex
이 보고서 공유 및 인용

버전이 지정된 평가 보고서, 중립 배지, 임베드 카드 및 인용을 공유하세요. Skillstore는 근거를 보고하지만 이 Skill의 안전 여부를 판단하지 않습니다.

버전별 보고서 열기
보안 평가

보고서 링크 복사

https://skillstore.io/skills/caffeinelabs-connector-weatherapi/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 배지

[![Skillstore security assessment](https://skillstore.io/badges/skills/caffeinelabs-connector-weatherapi/security.svg)](https://skillstore.io/skills/caffeinelabs-connector-weatherapi?utm_source=security_passport_badge)

HTML 배지

<a href="https://skillstore.io/skills/caffeinelabs-connector-weatherapi?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/caffeinelabs-connector-weatherapi/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

임베드 카드

<iframe src="https://skillstore.io/embed/skills/caffeinelabs-connector-weatherapi.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
학술 인용 (APA · BibTeX · CFF)

APA 인용

caffeinelabs. (2026). connector-weatherapi security audit report (audit version 1) [Author version 0.2.0]. Skillstore. https://skillstore.io/skills/caffeinelabs-connector-weatherapi/audits/1

BibTeX 인용

@techreport{caffeinelabs-caffeinelabs-connector-weatherapi-2026, author = {caffeinelabs}, title = {connector-weatherapi security audit report (audit version 1)}, institution = {Skillstore}, year = {2026}, number = {1}, url = {https://skillstore.io/skills/caffeinelabs-connector-weatherapi/audits/1}, note = {Author version 0.2.0} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "connector-weatherapi security audit report (audit version 1)" version: "0.2.0" type: report authors: - name: "caffeinelabs" date-released: "2026-09-18" url: "https://skillstore.io/skills/caffeinelabs-connector-weatherapi/audits/1" identifiers: - type: other value: "skillstore:caffeinelabs-connector-weatherapi:audit:1" description: "Skillstore immutable audit report identifier"

Skillstore 점수

이 점수의 이유 증거 신뢰도: 중간
55
아키텍처
100
유지보수성
87
콘텐츠
65
커뮤니티
91
사양 준수

만들 수 있는 것

Build a Canister Weather Panel

Create a Motoko backend that returns current temperature and multi-day forecasts for a web application.

Add Location Search

Connect autocomplete, timezone, or IP lookup operations to location-aware product workflows.

Handle WeatherAPI Responses

Design reliable response handling for optional fields, plan restrictions, HTTP errors, and changing timestamps.

이 프롬프트를 사용해 보세요

Start a Weather Integration
Show a minimal Motoko canister using weatherapi-client to return the current temperature for a location.
Create a Forecast Endpoint
Add a three-day forecast endpoint using weatherapi-client. Explain the enum value and optional response handling.
Add Location Features
Design Motoko functions for timezone, IP lookup, and search autocomplete using the documented WeatherAPI operations.
Review Outcall Correctness
Review this Motoko weather integration for replicated outcall errors, API key exposure, optional fields, and HTTP error handling.

모범 사례

  • Keep the API key in an admin-controlled stable variable.
  • Use non-replicated outcalls unless a transform removes volatile fields.
  • Handle optional response fields and provider errors explicitly.

피하기

  • Do not hard-code the API key in source code.
  • Do not log request URLs containing the API key.
  • Do not use replicated outcalls with untransformed weather responses.

자주 묻는 질문

What does this skill connect?
It connects Motoko canisters to WeatherAPI.com through the generated weatherapi-client Mops package.
Which weather operations are covered?
It covers current, forecast, history, future, marine, astronomy, timezone, IP lookup, and search autocomplete operations.
Where does the API key go?
The client places it in the request query string, so URL logging must be prevented.
Why are calls non-replicated?
Weather responses contain changing timestamps, which can differ across subnet nodes during replicated execution.
Are all response fields required?
No. The generated response models use optional fields because WeatherAPI can omit fields based on the request or plan.
What happens on an API error?
The client throws an error for non-2xx responses and decode failures. Catch errors and surface a useful message.

개발자 세부 정보

작성자

caffeinelabs

라이선스

MIT

작성자 버전

v0.2.0

Skillstore 리비전

r1

참조

3a2ee94cdff27ec6e1c61801491b55252514035d

유지보수 최신성

2026. 9. 18.

사용량

0 다운로드 · 0 조회

파일 구조

📄 SKILL.md

caffeinelabs의 다른 스킬

전체 보기
전체 보기