12306 Train Query
v1.0.2Query China Railway 12306 for train schedules, remaining tickets, and station info. Use when user asks about train/高铁/火车 tickets, schedules, or availability...
⭐ 6· 2.3k·29 current·32 all-time
by@kirorab
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the included scripts: both scripts implement station lookup and ticket queries against 12306 (kyfw.12306.cn / www.12306.cn). The required binary (node) is appropriate and proportional.
Instruction Scope
SKILL.md instructs running the provided node scripts and documents outputs, options, and that station data is cached. The scripts only access 12306 endpoints and local cache paths under the skill directory (../data/stations.json), which is consistent with the documented behavior.
Install Mechanism
No install spec is provided (instruction-only skill with bundled scripts). No downloads from third-party URLs or package installs are performed by the skill itself; this is low-risk and consistent with the README and SKILL.md.
Credentials
The skill requires no environment variables or credentials. It performs unauthenticated fetches against 12306 public APIs as documented, so requested environment/credential access is minimal and proportional.
Persistence & Privilege
always:false (default). The scripts create and update a local cache file data/stations.json under the skill directory, which is a reasonable and documented local persistence for station data.
Assessment
This skill appears coherent and does what it says: it queries 12306 public endpoints and caches station data under the skill's data directory. Before installing, ensure you trust the skill source (it will make network requests to kyfw.12306.cn and www.12306.cn) and are comfortable with the script writing a local cache file (data/stations.json) in the skill folder. If you need to audit further, inspect scripts/query.mjs and scripts/stations.mjs (they're included) and run them in a sandbox or review network traffic to confirm behavior.Like a lobster shell, security has layers — review code before you run it.
latestvk97awkdnan17eay40fcgger9b582b2xn
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🚄 Clawdis
Binsnode
