gotrain

• Analyzed: May 12, 2026, 3:03 AM
• Findings: 1
• Version: 1.3.0
• Hash: bbc6fee795ca03fda063922781ea31c721b3d6c8faf2cba56ad7cfdba5877b01
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is classified as benign. It transparently defines a skill to interact with the `gotrain-cli` for MTA transit information. The `SKILL.md` file instructs the OpenClaw agent to install the `gotrain-cli` npm package globally, which is a standard method for installing command-line tools. There is no evidence of prompt injection, data exfiltration, malicious execution, persistence mechanisms, or obfuscation within the provided files. The instructions and stated purpose are clearly aligned, and the source code repository for the CLI is provided.