Back to skill
Skillv1.1.0
VirusTotal security
NS Trains · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignMay 1, 2026, 3:13 AM
- Hash
- 23cb2743838faccf717e81e4669cf1dbd1cfa73803ef7c3c58a765475332e0ff
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: ns-trains Version: 1.1.0 This skill is classified as benign. The code is well-structured and clearly aligned with its stated purpose of checking Dutch train schedules via the NS API. A critical security control is implemented in `scripts/ns-api.mjs`, which enforces an HTTPS-only connection and an explicit allowlist for the NS API host (`gateway.apiportal.ns.nl`), preventing arbitrary network egress. The `SKILL.md` instructions are straightforward and do not contain any prompt injection attempts. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or obfuscation. Environment variables are handled appropriately for API key management and user-defined commute stations.
- External report
- View on VirusTotal