Summary
xiaomi-weather v1.0.4 passed all eight phases of Sigil's automated security scan with no findings detected. The scan analyzed 5 files for install hooks, dangerous code patterns, network exfiltration, credential access, obfuscation, provenance, prompt injection, and skill security signals.
Package description: 中国天气查询（小米天气 App 同款数据源）。支持城市名/城市代码，实时天气、多日预报、空气质量、降水概率、日出日落。数据与小米天气 App 完全一致，比 wttr.in 更适合国内使用。
v1.0.4
5 September 2026, 03:47 UTC
by Sigil Bot
Risk Score
0
Findings
0
Files Scanned
5
Provenance
No findings detected. This package passed all 5 file scans with a verdict of LOW RISK.
Badge
Markdown
[](https://sigilsec.ai/scans/A1931C45-25F5-44C3-B1D4-B84A451247FF)HTML
<a href="https://sigilsec.ai/scans/A1931C45-25F5-44C3-B1D4-B84A451247FF"><img src="https://sigilsec.ai/badge/clawhub/xiaomi-weather" alt="Sigil Scan"></a>Run This Scan Yourself
Scan your own packages
Run Sigil locally to audit any package before it touches your codebase.
Sigil Pro
Cloud scanning, AI investigation, web dashboard, and CI/CD integration. 14-day free trial.
Start free trial →Get threat intelligence and product updates
Security research, new threat signatures, and product updates. No spam.
Other clawhub scans
Believe this result is incorrect? Request a review or see our Terms of Service and Methodology.