Mcporter Railway Query
v1.1.0通过 mcporter CLI 查询中国铁路票务信息。适用于用户想要搜索 G/D/C 车票、查看列车时刻表、查询座位可用性或规划中国城市之间的铁路旅行。支持按日期、时间范围、列车类型进行筛选,并对结果进行排序。
⭐ 0· 945·2 current·2 all-time
byLance@lancenas·duplicate of @lancenas/mcporter-railway-query (1.1.0)·canonical: @lancenas/mcporter-railway-query-repo
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the code and docs: helper shell scripts call the mcporter CLI to query 12306 MCP endpoints. The requested artifacts (mcporter CLI and a mcporter.json config) are expected for this functionality.
Instruction Scope
SKILL.md and scripts only instruct running mcporter with user-supplied parameters and reading a config file (default ~/.mcporter/mcporter.json). They do not attempt to read unrelated files, access other environment variables, or transmit data to hidden endpoints in the repository itself.
Install Mechanism
No install spec in the skill bundle; developer recommends installing mcporter via npm in documentation. The repository contains only small shell scripts and reference docs — no downloads or archive extraction from untrusted URLs.
Credentials
The skill declares no required environment variables or credentials. The only config referenced is the user's mcporter.json (expected to hold MCP server URL). There are no unrelated credentials requested.
Persistence & Privilege
The skill is not 'always' enabled, does not modify other skills or system-wide settings, and does not persist secrets. Scripts are runtime helpers only.
Assessment
This skill is a lightweight wrapper that runs the mcporter CLI; before installing, verify you trust the mcporter package source (npm) and inspect your ~/.mcporter/mcporter.json. The MCP server URL in that config is the endpoint that will receive your queries — prefer a trusted or local server (e.g., 127.0.0.1) to avoid sending requests to an unknown remote service. The scripts do not perform booking or store credentials, but they will call whatever MCP server you configure, so treat the server URL as sensitive and review it if you have privacy or security concerns.Like a lobster shell, security has layers — review code before you run it.
latestvk97acxx3wvzw92te1cbd2zr2fh839792
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
