12306
ReviewAudited by ClawScan on May 1, 2026.
Overview
This is a coherent instruction-only 12306 travel automation skill, but users should notice that it may operate inside a logged-in account and handle trip/order details.
This skill appears purpose-aligned and instruction-only. Before using it, confirm each action that could submit a waitlist, change an order, export a CSV, or use your logged-in account. Keep monitoring intervals modest, use only official 12306 pages, and avoid retaining passenger or order data longer than necessary.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent may work inside your logged-in 12306 account and could access or help perform account-sensitive ticketing actions.
The skill expects use of a logged-in 12306 session and session/CSRF credentials for sensitive operations. This is coherent with the stated 12306 account workflow, but it is still privileged account access.
登录通常需要短信或扫码与滑块验证码，人机校验不可绕过 - 会话维持依赖 Cookie 与 HTTPS；敏感操作需 CSRF Token
Use only the official 12306 website, do not share full credentials outside the login page, and require explicit confirmation before any waitlist submission, payment-related, cancellation, refund, or change action.
Automated checks or waitlist actions could affect your account activity or trigger platform risk controls if run too often.
The artifact describes account workflow automation and periodic checking. It also includes rate-limit guidance, making it purpose-aligned, but users should control frequency and approvals.
候补跟踪：提交候补 → 定时查询候补状态 → 成功后生成提醒与出行清单 - 查询频率需限流（建议≥10s/次，峰值期更长）避免触发风控
Set a clear monitoring interval and end time, and require approval before submitting waitlists or changing ticket/order state.
Trip history, passenger names, order numbers, and partial ID details may be summarized or exported.
The skill handles travel order summaries containing passenger and partial identity information, and it may retain summaries for reminders. The artifact limits full-ID storage, but the remaining data is still sensitive.
订单号、订单状态、乘客姓名、证件类型与尾号、取票方式 - 不存储完整证件号码与隐私数据，仅保留必要摘要用于提醒
Keep exported CSVs and reminders private, avoid storing unnecessary personal details, and delete summaries when the trip or monitoring task is complete.