스킬 taiwan-weather
📦
taiwan-weather
콘텐츠 리비전 r1 안전 ⚙️ 외부 명령어🌐 네트워크 접근📁 파일 시스템 접근
Check Taiwan Weather and Disaster Alerts
Taiwan weather checks can require API keys or separate searches for forecasts and disaster alerts. This skill guides keyless Open-Meteo queries and NCDR alert lookups with location and timestamp checks.
지원: Claude Codex Code(CC)
내 에이전트로 설치
이 요청을 에이전트에 복사하세요. 공식 Skill 페이지와 매니페스트가 포함되어 있습니다.
에이전트 요청
Review the Skillstore skill "taiwan-weather" from https://skillstore.io/skills/tahodev-taiwan-weather.md and its manifest at https://skillstore.io/api/skills/tahodev-taiwan-weather/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.에이전트는 계속해서 계획을 표시하고 보안 정책에서 요구하는 확인을 요청해야 합니다.
에이전트가 읽기 쉬운 리소스
AI 에이전트, 크롤러, 스크립트가 전체 페이지 대신 정리된 컨텍스트만 필요할 때 이 링크를 사용하세요.
테스트해 보기
"taiwan-weather" 사용 중입니다. What is the current weather in Taipei?
예상 결과:
- Illustrative example only, not live weather data.
- Location: Taipei. Source: Open-Meteo.
- Returned local time: 2026-09-09 10:00 Asia/Taipei.
- Temperature: 28 C. Humidity: 70%. Precipitation: 0 mm. Wind speed: 8 km/h.
- Weather: partly cloudy. These are model-based conditions, not an official CWA forecast.
"taiwan-weather" 사용 중입니다. Is there an active typhoon warning?
예상 결과:
- Illustrative failure response.
- The NCDR typhoon feed could not be retrieved, so I cannot verify active alerts.
- A failed request does not mean there are no warnings.
- Check current Central Weather Administration announcements before making safety decisions.
보안 감사
안전v1 • 2026. 10. 13. 버전별 보고서 열기
Markdown backticks, public weather URLs, and readable Chinese documentation explain the command, network, and entropy false positives. Two filesystem findings confirm shared temporary-file risks: symlink-based overwrite and local alert-data substitution. No evidence found of prompt injection, credential theft, or intentional data exfiltration.
1
스캔된 파일
151
분석된 줄 수
2
검토 항목
0
오탐 무시됨
기능 검토 항목 (2)
이 스킬에 대해 예상될 수 있는 실제 로컬 기능이므로 검토가 필요하지만, 확인된 악의적 동작으로는 집계되지 않습니다.
중간
Temp directory access
curl -sm 30 'https://alerts.ncdr.nat.gov.tw/RssAtomFeed.ashx?AlertType=5' -o /tmp/typhoon.xml
curl writes to the predictable shared path /tmp/typhoon.xml without exclusive creation. A local attacker can pre-create a symlink to overwrite another writable file.
중간
Temp directory access
h = open('/tmp/typhoon.xml', encoding='utf-8').read()
The parser trusts the same predictable shared path without binding the read to a verified download. Local substitution can feed forged alert text into reporting.
위험 요인
⚙️ 외부 명령어 (18)
🌐 네트워크 접근 (6)
📁 파일 시스템 접근 (2)
감사자: codex
이 보고서 공유 및 인용
버전이 지정된 평가 보고서, 중립 배지, 임베드 카드 및 인용을 공유하세요. Skillstore는 근거를 보고하지만 이 Skill의 안전 여부를 판단하지 않습니다.
보고서 링크 복사
https://skillstore.io/skills/tahodev-taiwan-weather/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 배지
[](https://skillstore.io/skills/tahodev-taiwan-weather?utm_source=security_passport_badge)HTML 배지
<a href="https://skillstore.io/skills/tahodev-taiwan-weather?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/tahodev-taiwan-weather/security.svg" alt="Skillstore security assessment" loading="lazy"></a>임베드 카드
<iframe src="https://skillstore.io/embed/skills/tahodev-taiwan-weather.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>학술 인용 (APA · BibTeX · CFF)
APA 인용
tahodev. (2026). taiwan-weather security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/tahodev-taiwan-weather/audits/1BibTeX 인용
@techreport{tahodev-tahodev-taiwan-weather-2026,
author = {tahodev},
title = {taiwan-weather security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/tahodev-taiwan-weather/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "taiwan-weather security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "tahodev"
date-released: "2026-10-13"
url: "https://skillstore.io/skills/tahodev-taiwan-weather/audits/1"
identifiers:
- type: other
value: "skillstore:tahodev-taiwan-weather:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore 점수
이 점수의 이유 증거 신뢰도: 중간 55
아키텍처
85
유지보수성
87
콘텐츠
65
커뮤니티
83
사양 준수
만들 수 있는 것
Check Commuting Conditions
Check current temperature, precipitation, and wind for a Taiwan city before commuting.
Compare Short Travel Forecasts
Compare three-day temperature ranges and rain probabilities for planned destinations, with verified coordinates.
Review Public Disaster Alerts
Retrieve relevant NCDR feeds, review publication and expiration times, and consult authoritative announcements before operational decisions.
이 프롬프트를 사용해 보세요
Current City Weather
Check current weather in Taipei. Include temperature, humidity, precipitation, wind, source, and the returned Asia/Taipei timestamp.
Three-Day Forecast
Show the next three forecast days for Kaohsiung. Include weather descriptions, temperature ranges, rain probabilities, and the Open-Meteo source.
Verify a Smaller Destination
Find Lugang using English geocoding. Verify country_code TW and the administrative area before giving its three-day forecast. Report any ambiguity.
Review Multiple Alert Types
Check NCDR typhoon, rainfall, and flood feeds. Space requests by three seconds and use private temporary files. Verify update and expiration timestamps. Report failures and defer official decisions to authoritative announcements.
모범 사례
- Verify Taiwan coordinates and include the returned local timestamp and data source in weather reports.
- Use private temporary files for alert downloads, verify retrieval success, and check publication and expiration times.
- Space NCDR requests by at least three seconds and use authoritative announcements for safety decisions.
피하기
- Presenting Open-Meteo model forecasts as official CWA forecasts.
- Guessing coordinates or accepting ambiguous geocoding results without checking Taiwan location details.
- Reporting expired alerts, stale files, or failed requests as current conditions.
자주 묻는 질문
Does this skill require an API key?
The documented Open-Meteo and NCDR public queries require no API key or login.
Are these official Taiwan weather forecasts?
No. Open-Meteo uses international weather models. Use CWA announcements or the separate cwa-weather skill for official forecasts.
Which locations are included?
The skill lists coordinates for 22 Taiwan counties and cities, plus Kenting and Puli. Additional locations require verified geocoding.
Can I search using Chinese place names?
The skill documents unsuccessful Chinese-name geocoding tests and recommends English or pinyin. Verify the returned country and administrative area.
Which disaster alerts can it query?
NCDR feed examples cover typhoons, earthquakes, tsunamis, floods, debris flows and major landslides, rainfall, and high river levels.
What happens when a request fails?
The instructions limit retries and require reporting failure rather than inventing weather. Failed alert retrieval cannot establish that no warnings exist.
개발자 세부 정보
작성자
tahodev라이선스
MIT
Skillstore 리비전
r1
버전 안내
작성자가 버전을 선언하지 않았습니다.
리포지토리
https://github.com/tahodev/baodao-skill/tree/3ce4b58e4525f5a66390e1236b6d38702790225a/taiwan-weather참조
2aab20a3878daa05021884e089a7dd7739e08581
유지보수 최신성
2026. 10. 13.
사용량
0 다운로드 · 0 조회
파일 구조
📄 SKILL.md