gotrain

MTA system train departures (NYC Subway, LIRR, Metro-North). Use when the user wants train times, schedules, or service alerts for MTA transit. Covers MTA Subway, LIRR, and Metro-North across the greater New York area.

Security Scan

The skill's requirements and instructions line up with its stated purpose (a CLI wrapper for NYC transit info) and it doesn't request unrelated credentials or system access; the only notable risk is installing an npm package you haven't inspected.

Purpose & Capability

Name/description request a CLI named 'gotrain' and the skill requires the 'gotrain' binary and provides an npm install step for 'gotrain-cli' which creates that binary — this is coherent and expected for a CLI-based transit skill.

Instruction Scope

SKILL.md instructs the agent to run the gotrain CLI commands (stations, departures, alerts, fav, favs). It does not instruct the agent to read unrelated files, environment variables, or to transmit data to endpoints outside the CLI's expected behavior.

Install Mechanism

Installation is via npm (package 'gotrain-cli') which is a common and expected mechanism for providing a CLI. npm packages can run arbitrary install scripts and contain arbitrary JS, so this is a moderate-risk install method compared with no install spec or a vetted system package. The SKILL.md includes a GitHub repo which helps traceability but no homepage or publisher details are provided in the metadata.

Credentials

The skill requests no environment variables, no credentials, and no config paths — appropriate for a read-only transit query tool.

Persistence & Privilege

always is false and there are no indications the skill modifies other skills or system-wide agent settings. It is eligible for autonomous invocation by default (normal for skills) but requests no elevated persistence or privileges.

Assessment

This skill is internally consistent: it expects a 'gotrain' CLI and provides an npm package to install it. Before installing, inspect the npm package and its GitHub repository (publisher, recent commits, install scripts, and source code) because npm packages can execute arbitrary code during install. Prefer running the CLI in an isolated environment (container or VM) if you don't fully trust the publisher. Check where the CLI stores favorites or cache on your filesystem if you care about local data storage. If you need higher assurance, verify the package's SHA/signature or use a vetted distribution channel.

Atomic CLI for NYC transit departures (MTA Subway, LIRR, Metro-North).

Installation

npm install -g gotrain-cli

Commands

Command	Description
gotrain stations [query]	List/search stations
gotrain departures <station-id>	Show departures for a station
gotrain alerts	Active service alerts
gotrain fav <id>	Toggle favorite station
gotrain favs	List favorite stations

Common Station IDs

• MNR-149 - New Haven
• MNR-151 - New Haven-State St
• MNR-1 - Grand Central
• MNR-203 - Penn Station (MNR)
• LIRR-349 - Grand Central
• SUBWAY-631 - Grand Central-42 St

Examples

# Search for Penn Station
gotrain stations penn

# New Haven to Grand Central departures
gotrain departures MNR-149

# Check service alerts
gotrain alerts

# Add favorite station
gotrain fav MNR-149

Source

https://github.com/gumadeiras/gotrain-cli