Wheels Router
PassAudited by ClawScan on May 1, 2026.
Overview
This instruction-only transit-planning skill is coherent and purpose-aligned, but users should notice that it connects to an external MCP server and may run an unpinned helper through npx for some clients.
This skill appears safe for its stated purpose. Before installing, be aware that it connects to an external routing service and may share the places, coordinates, and travel times you ask about; for MCP clients using npx, consider pinning or preinstalling the helper package if you want tighter supply-chain control.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A user who follows this setup may run whatever version of the mcp-remote package npx resolves at that time.
The setup example for several MCP clients runs mcp-remote through npx without pinning a package version. This is a normal way to connect to an MCP server, but it depends on the npm package source and current package resolution.
"command": "npx", "args": ["mcp-remote", "https://mcp.justusewheels.com/mcp"]
If possible, pin the helper package version or use a trusted, preinstalled MCP client configuration.
Your route searches and trip details may be sent to the Wheels Router/Transitous service to produce results.
The skill connects the agent to an external MCP server and sends transit-planning inputs such as searched locations, coordinates, and times. This is expected for route planning, but those queries can reveal travel intent or location information.
"baseUrl": "https://mcp.justusewheels.com/mcp"; parameters include query, origin, destination, depart_at, and arrive_by
Avoid submitting sensitive home, workplace, or personal travel details unless you are comfortable sharing them with the external routing service.