ClawHub

OpenSky Flight Tracker

v0.1.0

Use this skill when the user asks about live flight positions, aircraft tracking by callsign or flight number, or flights currently overhead a location. Trig...

⭐ 0· 31·0 current·0 all-time
byJavier Ruiz@javi23ruiz
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The skill is a flight-tracking wrapper that requires a 'flight-tracker' CLI binary and proposes installing the 'flight-tracker-cli' pip package; this aligns with the described functionality of querying the OpenSky Network for live aircraft positions.
✓
Instruction Scope
SKILL.md only instructs the agent to run the flight-tracker CLI with arguments (callsign, coordinates, format, retries/timeouts). It does not ask the agent to read unrelated files, access environment variables, or send data to unexpected external endpoints.
ℹ
Install Mechanism
The SKILL.md includes an install stanza recommending 'pip install flight-tracker-cli' (a PyPI-based install). Pip installs are a common mechanism but can execute arbitrary code at install time; the registry-level metadata earlier said 'No install spec' which is a minor inconsistency (the install instruction exists inside SKILL.md rather than as an explicit platform install spec).
✓
Credentials
No environment variables, credentials, or config paths are requested. This is proportional for a public OpenSky-based CLI that doesn't require API keys.
✓
Persistence & Privilege
The skill is not always-enabled and does not request elevated or cross-skill configuration changes. Autonomous invocation is allowed by default but is not combined with other concerning privileges here.
Assessment
This skill appears coherent for querying OpenSky via a CLI. Before installing or invoking it: (1) verify the pip package ('flight-tracker-cli') is from a trusted publisher and inspect its source (PyPI/GitHub) because pip installs can run code during installation; (2) confirm you trust the 'flight-tracker' binary that will be executed by the agent; (3) be aware that piping JSON output to other tools or agents will transmit flight data — that is normal for integrations but consider privacy if you include location data tied to people; (4) note the SKILL.md contains the install suggestion rather than a platform-level install spec, so check how your agent/runtime will handle installing dependencies.

Like a lobster shell, security has layers — review code before you run it.

latestvk972zn9dfgt8gn1xt3pv4mfd2s848ebt

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

✈️ Clawdis
Binsflight-tracker

Comments