Seoul Subway
PassAudited by ClawScan on May 1, 2026.
Overview
This is a coherent subway-information skill, but it relies on a disclosed external proxy that will receive your station or route queries and standard web headers.
This skill appears safe for normal subway lookups. Before installing, be aware that it depends on a hosted Vercel proxy, so use session-only permission if you are unsure and avoid entering travel queries you would not want shared with that service.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Your station names, route searches, IP address, and User-Agent may be visible to the proxy operator, which can reveal travel intent even though no account credentials are used.
The skill clearly discloses an external proxy data flow and identifies the query and header data the proxy receives.
This skill sends requests to a proxy server at `vercel-proxy-henna-eight.vercel.app` ... Station names ... Search parameters ... Standard HTTP headers (IP address, User-Agent)
Approve the proxy only if you are comfortable sharing those lookup details; avoid sensitive itinerary queries if that privacy tradeoff matters to you.
If you choose the persistent approval option, future subway lookups to that proxy may proceed without another domain prompt.
The skill asks the user to grant WebFetch access to its proxy domain and documents an optional persistent approval choice.
Recommended / 권장: Select `Yes` to allow access for this session ... You may also select `Yes, and don't ask again` for convenience, but only if you trust the proxy server.
Use session-only approval unless you trust the proxy and expect to use the skill regularly.