Train Ticket Inquiry - 火车查询

v1.0.5

支持站站、车次、余票查询,返回时刻、票价与余票等。当用户说:北京到上海今天还有高铁票吗?帮我查一下 G1 次列车经停站,或类似火车票、余票问题时,使用本技能。

11· 589·5 current·5 all-time
by极速数据@jisuapi
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description match the actual behavior: the skill calls JisuAPI train endpoints (station2s, line, ticket). It only requires a JISU_API_KEY and python3, which are appropriate for this purpose.
Instruction Scope
SKILL.md tells the agent to run the included Python script with JSON parameters. The instructions do not ask the agent to read unrelated files, access other credentials, or transmit data to unexpected endpoints; network calls go to the documented api.jisuapi.com endpoints.
Install Mechanism
There is no install spec (instruction-only with an included script) — low risk. Minor implementation gap: script requires the Python 'requests' library but SKILL.md/metadata do not declare this dependency or provide installation steps.
Credentials
Only one required env var (JISU_API_KEY) is declared and used. That key is the expected credential for calling the third-party API; no unrelated secrets or config paths are requested.
Persistence & Privilege
Skill does not request persistent/always-on presence, does not modify other skills or system configs, and uses no elevated privileges.
Assessment
This skill appears to do what it claims: query JisuAPI for train schedules and ticket availability. Before installing: (1) obtain a JISU_API_KEY from jisuapi.com and set it only for this skill (avoid reusing sensitive keys), (2) ensure the runtime has Python3 and the 'requests' package installed, (3) be aware that queries (start/end/date) are sent to a third-party API over HTTPS — review JisuAPI's privacy/terms if that matters, and (4) rotate the API key if it is ever exposed. If you need offline or local-only behavior, this skill is not suitable because it depends on the external JisuAPI service.

Like a lobster shell, security has layers — review code before you run it.

latestvk978mkpfkmxbqwxs4caej9w18s844vem

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

🚆 Clawdis
Binspython3
EnvJISU_API_KEY
Primary envJISU_API_KEY

Comments