技能 taiwan-weather
📦
taiwan-weather
內容修訂 r1 安全 ⚙️ 外部命令🌐 網路存取📁 檔案系統存取
Check Taiwan Weather and Disaster Alerts
Taiwan weather checks can require API keys or separate searches for forecasts and disaster alerts. This skill guides keyless Open-Meteo queries and NCDR alert lookups with location and timestamp checks.
支援: Claude Codex Code(CC)
使用我的智慧代理安裝
將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。
智能體請求
Review the Skillstore skill "taiwan-weather" from https://skillstore.io/skills/tahodev-taiwan-weather.md and its manifest at https://skillstore.io/api/skills/tahodev-taiwan-weather/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。
Agent 可讀資源
當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。
測試它
正在使用「taiwan-weather」。 What is the current weather in Taipei?
預期結果:
- Illustrative example only, not live weather data.
- Location: Taipei. Source: Open-Meteo.
- Returned local time: 2026-09-09 10:00 Asia/Taipei.
- Temperature: 28 C. Humidity: 70%. Precipitation: 0 mm. Wind speed: 8 km/h.
- Weather: partly cloudy. These are model-based conditions, not an official CWA forecast.
正在使用「taiwan-weather」。 Is there an active typhoon warning?
預期結果:
- Illustrative failure response.
- The NCDR typhoon feed could not be retrieved, so I cannot verify active alerts.
- A failed request does not mean there are no warnings.
- Check current Central Weather Administration announcements before making safety decisions.
安全審計
安全v1 • 2026/10/13 開啟版本化報告
Markdown backticks, public weather URLs, and readable Chinese documentation explain the command, network, and entropy false positives. Two filesystem findings confirm shared temporary-file risks: symlink-based overwrite and local alert-data substitution. No evidence found of prompt injection, credential theft, or intentional data exfiltration.
1
已掃描檔案
151
分析行數
2
複核項目
0
已忽略的誤報
能力複核項目 (2)
這些是真實的本機能力，對此技能而言可能是預期行為，因此需要複核，但不會按已確認的惡意行為計分。
中
Temp directory access
curl -sm 30 'https://alerts.ncdr.nat.gov.tw/RssAtomFeed.ashx?AlertType=5' -o /tmp/typhoon.xml
curl writes to the predictable shared path /tmp/typhoon.xml without exclusive creation. A local attacker can pre-create a symlink to overwrite another writable file.
中
Temp directory access
h = open('/tmp/typhoon.xml', encoding='utf-8').read()
The parser trusts the same predictable shared path without binding the read to a verified download. Local substitution can feed forged alert text into reporting.
風險因素
⚙️ 外部命令 (18)
📁 檔案系統存取 (2)
審計單位: codex
分享與引用此報告
分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。
複製報告連結
https://skillstore.io/skills/tahodev-taiwan-weather/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 徽章
[](https://skillstore.io/skills/tahodev-taiwan-weather?utm_source=security_passport_badge)HTML 徽章
<a href="https://skillstore.io/skills/tahodev-taiwan-weather?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/tahodev-taiwan-weather/security.svg" alt="Skillstore security assessment" loading="lazy"></a>嵌入卡片
<iframe src="https://skillstore.io/embed/skills/tahodev-taiwan-weather.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>學術引用 (APA · BibTeX · CFF)
APA 引用
tahodev. (2026). taiwan-weather security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/tahodev-taiwan-weather/audits/1BibTeX 引用
@techreport{tahodev-tahodev-taiwan-weather-2026,
author = {tahodev},
title = {taiwan-weather security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/tahodev-taiwan-weather/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "taiwan-weather security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "tahodev"
date-released: "2026-10-13"
url: "https://skillstore.io/skills/tahodev-taiwan-weather/audits/1"
identifiers:
- type: other
value: "skillstore:tahodev-taiwan-weather:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore 評分
評分依據 證據置信度: 中 55
架構
85
可維護性
87
內容
65
社群
83
規範符合度
你可以打造什麼
Check Commuting Conditions
Check current temperature, precipitation, and wind for a Taiwan city before commuting.
Compare Short Travel Forecasts
Compare three-day temperature ranges and rain probabilities for planned destinations, with verified coordinates.
Review Public Disaster Alerts
Retrieve relevant NCDR feeds, review publication and expiration times, and consult authoritative announcements before operational decisions.
試試這些提示
Current City Weather
Check current weather in Taipei. Include temperature, humidity, precipitation, wind, source, and the returned Asia/Taipei timestamp.
Three-Day Forecast
Show the next three forecast days for Kaohsiung. Include weather descriptions, temperature ranges, rain probabilities, and the Open-Meteo source.
Verify a Smaller Destination
Find Lugang using English geocoding. Verify country_code TW and the administrative area before giving its three-day forecast. Report any ambiguity.
Review Multiple Alert Types
Check NCDR typhoon, rainfall, and flood feeds. Space requests by three seconds and use private temporary files. Verify update and expiration timestamps. Report failures and defer official decisions to authoritative announcements.
最佳實務
- Verify Taiwan coordinates and include the returned local timestamp and data source in weather reports.
- Use private temporary files for alert downloads, verify retrieval success, and check publication and expiration times.
- Space NCDR requests by at least three seconds and use authoritative announcements for safety decisions.
避免
- Presenting Open-Meteo model forecasts as official CWA forecasts.
- Guessing coordinates or accepting ambiguous geocoding results without checking Taiwan location details.
- Reporting expired alerts, stale files, or failed requests as current conditions.
常見問題
Does this skill require an API key?
The documented Open-Meteo and NCDR public queries require no API key or login.
Are these official Taiwan weather forecasts?
No. Open-Meteo uses international weather models. Use CWA announcements or the separate cwa-weather skill for official forecasts.
Which locations are included?
The skill lists coordinates for 22 Taiwan counties and cities, plus Kenting and Puli. Additional locations require verified geocoding.
Can I search using Chinese place names?
The skill documents unsuccessful Chinese-name geocoding tests and recommends English or pinyin. Verify the returned country and administrative area.
Which disaster alerts can it query?
NCDR feed examples cover typhoons, earthquakes, tsunamis, floods, debris flows and major landslides, rainfall, and high river levels.
What happens when a request fails?
The instructions limit retries and require reporting failure rather than inventing weather. Failed alert retrieval cannot establish that no warnings exist.
開發者詳細資訊
作者
tahodev授權
MIT
Skillstore 修訂
r1
版本提示
作者未聲明版本。
儲存庫
https://github.com/tahodev/baodao-skill/tree/3ce4b58e4525f5a66390e1236b6d38702790225a/taiwan-weather引用
2aab20a3878daa05021884e089a7dd7739e08581
維護新鮮度
2026/10/13
使用量
0 次下載 · 0 次瀏覽
檔案結構
📄 SKILL.md