by 安全扫描
OpenClaw
安全
high confidence该技能内部逻辑一致，做了它声称要做的事情：一个小的stdlib Python脚本调用open-meteo，写入本地文本摘要，SKILL.md展示了如何安排它，只有少量文档/清单不匹配需要注意。
评估建议
该技能看起来安全，做了它承诺的事情，但安装前请检查两点：(1) 清单省略了必需的二进制文件——您需要可用的python3和OpenClaw CLI，如果您想使用提供的cron示例。(2) 该技能提到通过Telegram转发，但不包含Telegram代码或令牌；确保您的代理/平台配置了所需的消息集成并且可信。同时确认您对代理访问open-meteo和脚本在data/weather下写入纯文本文件（这些文件是本地的，代理可以读取）感到舒适。如果您想修复这些差距，请要求作者声明python3/openclaw作为要求，并记录如何工作Telegram转发（或添加使用指定TELEGRAM_TOKEN的可选代码，如果您希望将该行为封装在技能中）。...详细分析 ▾
ℹ 用途与能力
The skill's name/description match the contained code and instructions: the Python script fetches Tübingen weather from open-meteo and outputs a short summary. Minor inconsistency: the manifest declares no required binaries, but SKILL.md demonstrates running the script with python3 and uses the openclaw CLI to add a cron job. Requiring python3 and an OpenClaw CLI is reasonable for the stated purpose but should be declared.
✓ 指令范围
SKILL.md instructs only to run the included script, save the output under data/weather (optional), and schedule a cron job. The runtime instructions do not direct the agent to read unrelated files or environment variables. The doc asks the agent to forward the stdout summary via Telegram, but the skill itself contains no Telegram integration or credentials — this relies on the agent/platform having a messaging integration configured.
✓ 安装机制
No install spec and no external packages are used; the script relies on Python stdlib and a direct HTTPS call to open-meteo. This is low-risk from an install perspective.
✓ 凭证需求
The skill requests no environment variables or credentials and the code does not access secrets or unrelated config paths. The Telegram forwarding mentioned in the description is not implemented in the skill and would require the agent/platform to provide messaging credentials separately.
✓ 持久化与权限
always is false and the skill does not request persistent elevated privileges or modify other skill configurations. It writes its own output files under data/weather which is appropriate for its function.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/2/13
初始发布：图宾根每日08:00天气摘要
● 无害
安装命令 点击复制
官方npx clawhub@latest install tuebingen-weather
镜像加速npx clawhub@latest install tuebingen-weather --registry https://cn.clawhub-mirror.com
技能文档
概览
此技能提供图宾根每日天气摘要（使用Open-Meteo API，无需API密钥）。输出：包含当前状态、当日最高/最低温度和降雨概率的简洁文本摘要。快速开始
- 手动获取
python3 skills/tuebingen-weather/scripts/fetch_tuebingen_weather.py \
--output data/weather/$(date +%F)_tuebingen.txt
- 无文件 (仅控制台/Telegram):
python3 skills/tuebingen-weather/scripts/fetch_tuebingen_weather.py
自动化08:00发送
- 创建Cron作业
openclaw cron add <<'JSON'
{
"name": "tuebingen-weather-08",
"schedule": {
"kind": "cron",
"expr": "0 8 *",
"tz": "Europe/Berlin"
},
"sessionTarget": "isolated",
"payload": {
"kind": "agentTurn",
"model": "default",
"message": "Run python3 skills/tuebingen-weather/scripts/fetch_tuebingen_weather.py --output data/weather/$(date +%F)_tuebingen.txt. Send Master the stdout summary + mention the saved file. Report errors if the command fails."
}
}
JSON
- 概览
- 保存文本文件到
data/weather/YYYY-MM-DD_tuebingen.txt(可自定义)。 - Cron-Bot每晨08:00自动发送消息。
提示
- 脚本仅使用Stdlib (
urllib,json)。无需pip安装。 - 天气代码 → 德语描述在
WEATHER_CODES中。 - 时区：
Europe/Berlin— 自动适应夏/冬令时。 - 可以在脚本中轻松添加自定义字段（如风速、UV等）。
资源
scripts/fetch_tuebingen_weather.py— Open-Meteo的CLI脚本。
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制