Skills current-location-weather
📦

current-location-weather

Content revision r1 Medium Risk 🌐 Network access⚙️ External commands

Check Current Weather by Location

Users need quick current weather without configuring an API key. This skill runs a Python helper that detects location or accepts a city.

Supports: Claude Codex Code(CC)
⚠️ 50 Poor

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "current-location-weather" from https://skillstore.io/skills/danielmax937-current-location-weather.md and its manifest at https://skillstore.io/api/skills/danielmax937-current-location-weather/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/danielmax937-current-location-weather.md Signed manifest GET /api/skills/danielmax937-current-location-weather/manifest Signed lockfile GET /api/skills/danielmax937-current-location-weather/lockfile

Test it

Using "current-location-weather". What is the weather where I am?

Expected outcome:

The assistant returns the detected city and a short current-conditions summary with temperature, humidity, wind, and condition.

Using "current-location-weather". Check Paris weather and include details for planning a walk.

Expected outcome:

The assistant reports current temperature, feels-like temperature, wind, humidity, and a practical note about outdoor comfort.

Using "current-location-weather". Should I bring an umbrella in Seattle right now?

Expected outcome:

The assistant checks current conditions and gives a brief recommendation based on the reported weather.

Security Audit

Medium Risk
v9 • 7/5/2026 Open versioned report

No prompt injection, obfuscation, or command-execution abuse was found; the code-fence and obfuscation alerts are false positives. The skill intentionally makes outbound requests to ip-api.com and wttr.in, including automatic IP geolocation over plaintext HTTP, so the remaining concerns are privacy and network-integrity risks.

2
Files scanned
234
Lines analyzed
6
Review items
0
False positives ignored

Confirmed security concerns (1)

Medium
scripts/get_weather.py:21-37SKILL.md:68-75
Automatic IP Geolocation Privacy Exposure
When no location is provided, the script contacts ip-api.com to infer location from the caller IP before weather lookup. This behavior is disclosed, but it lacks an explicit consent step before sharing approximate location with a third-party service.
The code path calls ip-api.com automatically when location is absent, and the documentation states that IP-based location detection is used. The risk is privacy exposure rather than hidden malware.
Capability review items (6)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium
scripts/get_weather.py:24
Hardcoded URL
with urllib.request.urlopen("http://ip-api.com/json/", timeout=10) as response:
The hardcoded ip-api.com endpoint uses plaintext HTTP for geolocation. That can expose the request path to network observers and allows response tampering in transit.
Low
scripts/get_weather.py:24
Python HTTP libraries
with urllib.request.urlopen("http://ip-api.com/json/", timeout=10) as response:
The code performs an outbound request to ip-api.com to infer location from the caller IP. This exposes IP-derived location data to a third-party service.
Low
scripts/get_weather.py:68
Python HTTP libraries
req = urllib.request.Request(url, headers={"User-Agent": "curl/7.68.0"})
The Request object prepares an outbound call to wttr.in using the requested or detected location. This is intended behavior, but it still shares location context with an external service.
Low
scripts/get_weather.py:69
Python HTTP libraries
with urllib.request.urlopen(req, timeout=15) as response:
The urlopen call sends the weather request to wttr.in. The endpoint is part of the skill function, but it is real external network access.
Low
scripts/get_weather.py:62
Hardcoded URL
url = f"https://wttr.in/{encoded_location}?format=j1"
The hardcoded wttr.in JSON endpoint is an intended weather provider. It is still an external dependency that receives the requested location.
Low
scripts/get_weather.py:65
Hardcoded URL
url = f"https://wttr.in/{encoded_location}?format=%l:+%c+%t+%h+%w"
The hardcoded wttr.in text endpoint is an intended weather provider. It creates a real third-party network request with location context.

Risk Factors

🌐 Network access (7)
scripts/get_weather.py:17 scripts/get_weather.py:24 scripts/get_weather.py:68 scripts/get_weather.py:69 scripts/get_weather.py:24 scripts/get_weather.py:62 scripts/get_weather.py:65
⚙️ External commands (12)
SKILL.md:14-16 SKILL.md:16-21 SKILL.md:21-23 SKILL.md:23-26 SKILL.md:26-29 SKILL.md:29-32 SKILL.md:32-35 SKILL.md:35-40 SKILL.md:40-43 SKILL.md:43-46 SKILL.md:46-64 SKILL.md:64-76
Audited by: codex View Audit History →
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/danielmax937-current-location-weather/audits/9?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/danielmax937-current-location-weather/security.svg)](https://skillstore.io/skills/danielmax937-current-location-weather?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/danielmax937-current-location-weather?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/danielmax937-current-location-weather/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/danielmax937-current-location-weather.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

DanielMax937. (2026). current-location-weather security audit report (audit version 9) [Author version unspecified]. Skillstore. https://skillstore.io/skills/danielmax937-current-location-weather/audits/9

BibTeX citation

@techreport{danielmax937-danielmax937-current-location-weather-2026, author = {DanielMax937}, title = {current-location-weather security audit report (audit version 9)}, institution = {Skillstore}, year = {2026}, number = {9}, url = {https://skillstore.io/skills/danielmax937-current-location-weather/audits/9}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "current-location-weather security audit report (audit version 9)" version: "unspecified" type: report authors: - name: "DanielMax937" date-released: "2026-07-05" url: "https://skillstore.io/skills/danielmax937-current-location-weather/audits/9" identifiers: - type: other value: "skillstore:danielmax937-current-location-weather:audit:9" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High
45
Architecture
85
Maintainability
85
Content
70
Community
91
Spec Compliance

What You Can Build

Plan a Daily Commute

Check current conditions before deciding on clothing, timing, or umbrella needs.

Check Travel Conditions

Look up current weather in a destination city before leaving or packing.

Add Weather Context to Assistant Tasks

Use text or structured output when an assistant needs weather context for a workflow.

Try These Prompts

Current Weather 
Use current-location-weather to check the weather where I am now.
Specific City Weather 
Check the current weather in Tokyo, Japan, and summarize the temperature, condition, humidity, and wind.
Structured Weather Summary 
Get current weather for London with structured output, then summarize temperature, feels-like temperature, humidity, wind, and UV index.
Compare Destination Conditions 
Check current weather for New York, Berlin, and Seoul, then give a concise packing recommendation for each city.

Best Practices

  • Use a specific city when privacy or accuracy matters.
  • State whether you want concise text or structured detail before the weather check.
  • Verify severe weather, travel, or safety decisions with an official weather source.

Avoid

  • Do not use auto-detection when you do not want to contact a geolocation service.
  • Do not treat current conditions as a long-range forecast.
  • Do not rely on this skill for emergency weather alerts or safety-critical decisions.

Frequently Asked Questions

Does this skill need an API key?
No. It uses public services that do not require an API key.
How does it find my current location?
It can contact ip-api.com to estimate location from the caller IP address.
Can I avoid IP-based location detection?
Yes. Provide a city or region in the request to use that location instead.
What weather source does it use?
It requests current weather data from wttr.in.
Can it return detailed weather fields?
Yes. Structured output can include temperature, humidity, wind, UV index, visibility, pressure, and cloud cover.
Is it suitable for emergency weather alerts?
No. Use an official weather service for warnings, emergency alerts, and safety decisions.

Developer Details

License

MIT

Skillstore revision

r1

Version notice

The author did not declare a version.

Repository

https://github.com/DanielMax937/pocker/tree/main/current-location-weather/

Ref

7e9e368dc1a370f2040369ebcd0db06d90cb48e5

Maintenance freshness

7/18/2026

Usage

7 downloads · 168 views

File structure

📁 scripts/

📄 get_weather.py

📄 SKILL.md