!
Purpose & Capability
Name/description match the implementation: the script queries http://bus.yanjibus.com and prints route + realtime vehicle data. However the registry metadata declares no required binaries while the script clearly depends on curl and python3 — an omission that is incoherent and may mislead users about runtime requirements.
!
Instruction Scope
SKILL.md instructs the agent to run the included bash script which fetches HTML/JSON from bus.yanjibus.com and parses it. The script embeds two sources of untrusted input (BUS_DATA from the remote HTTP response and user-supplied --from/--to values) directly into the Python -c source as triple-quoted string literals without escaping. That creates a realistic remote/user-controlled code-injection / arbitrary-Python-execution risk if the fetched data or parameters contain quote sequences or crafted payloads.
✓
Install Mechanism
No install spec — instruction-only with an included script. Nothing is downloaded or written during install, which is proportionate to the stated purpose.
✓
Credentials
The skill requests no environment variables, credentials, or config paths, which aligns with its stated purpose of querying a public bus site.
✓
Persistence & Privilege
The skill does not request permanent presence (always:false) and does not modify other skills or system configs. Autonomous invocation is allowed by default but is not combined with other privilege escalation signals.
What to consider before installing
This skill appears to implement the advertised bus-query functionality, but you should be cautious before running it: (1) the metadata omits required binaries — ensure curl and python3 are available; (2) the script embeds the remote JSON (and user-supplied station names) directly into an inlined Python program without escaping, which could allow arbitrary Python code execution if the remote site or inputs are malicious or if an attacker can tamper with the HTTP responses; (3) only use this skill if you trust the bus.yanjibus.com host or run it in an isolated/sandboxed environment. If you plan to install or run it, consider patching the script to avoid embedding untrusted data into source (e.g., pass BUS_DATA via stdin or a temporary file and use json.load, and safely escape or validate user inputs), and update the skill metadata to list required binaries.
