ClawHub

Trein

v1.0.0

Query Dutch Railways (NS) for train departures, trip planning, disruptions, and station search via the trein CLI.

⭐ 1· 1.7k·0 current·0 all-time
by@joehoel
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description, required binary (trein), primary env var (NS_API_KEY), and install methods (npm package + GitHub release binaries) all match the stated purpose of a CLI for the NS API.
ℹ
Instruction Scope
SKILL.md stays within scope (commands for departures, trips, disruptions, stations). It references storing/reading a config file (~/.config/trein/trein.config.json) for an apiKey and aliases; the registry metadata lists no required config paths — this is a minor inconsistency (the config path is optional per README but SKILL.md documents it). The instructions do not request other files, unrelated env vars, or external endpoints beyond the NS API and the project's GitHub releases.
✓
Install Mechanism
Install options are an npm package 'trein' or direct downloads from GitHub Releases (official repo URL in the homepage). These are standard distribution mechanisms; no obscure hosts, shorteners, or arbitrary extract steps are used in the metadata.
✓
Credentials
Only NS_API_KEY is required and declared as the primary credential, which is appropriate for a client of the NS API. No unrelated secrets or broad credential access are requested.
ℹ
Persistence & Privilege
The skill will persist user aliases and (optionally) the API key in ~/.config/trein/trein.config.json per the README. This is normal for a CLI but is persistent data stored on the user's home directory; the skill does not request elevated system privileges or modify other skill configurations. always:false (no forced inclusion).
Assessment
This skill appears to be what it says: a CLI wrapper for NS. Before installing, verify the npm package and GitHub repo ownership (https://github.com/joelkuijper/trein) to ensure you trust the publisher. Be cautious with your NS_API_KEY: prefer setting it as an environment variable rather than leaving it in a file, or ensure the config file (~/.config/trein/trein.config.json) has restrictive permissions. If possible, check what scopes the NS API key has and avoid using an overly-permissive key. Finally, if you want extra assurance, review the package source or the GitHub release binary checksums before installing.

Like a lobster shell, security has layers — review code before you run it.

latestvk976y5xn3ek6dhcjqv0tzwcn4h7zxhqg

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🚆 Clawdis
Binstrein
EnvNS_API_KEY
Primary envNS_API_KEY

Install

Install trein (npm)
Bins: trein
npm i -g trein

Comments