BVG (Berliner Verkehrsbetriebe) Route Planner

PassAudited by ClawScan on May 1, 2026.

Overview

This skill is a coherent BVG route-planning helper; it sends route queries to the disclosed BVG transport API and includes a simple local helper script.

This skill appears safe and purpose-aligned for BVG route planning. Before installing, understand that your route queries are sent to v6.bvg.transport.rest and that the optional helper script expects common local tools like python3, curl, and jq.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Your route details, such as addresses, stops, and travel times, may be sent to the BVG transport API to produce results.

Why it was flagged

The skill sends user-provided origins, destinations, and timing details to an external route-planning API. This is expected for the stated purpose, but travel locations can be privacy-sensitive.

Skill content
Resolve `from` and `to` into either stop IDs ... using GET /locations or /locations/nearby. Call GET /journeys...
Recommendation

Use the skill only for route queries you are comfortable sending to the disclosed public API; avoid highly sensitive home/work details if that is a concern.

What this means

If you try to run the helper script directly, it may fail unless those tools are already installed.

Why it was flagged

The helper script relies on local binaries such as python3, curl, and jq, while the registry metadata declares no required binaries. This is a metadata completeness issue rather than evidence of unsafe behavior.

Skill content
urlencode() { python3 -c "import urllib.parse,sys;print(urllib.parse.quote(sys.argv[1], safe=''))" "$1"; }
...
curl -s "$url" | jq
Recommendation

Confirm python3, curl, and jq are available before using the script, or use the instruction-only workflow through the agent.