ClawHub

Traffic Query

v1.0.1

Query and organize China travel information for flights and trains, including schedules, prices, duration, stops, and summary tables. Use when the user asks...

⭐ 0· 181·0 current·0 all-time
by@liubroth
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the instructions: the SKILL.md focuses on collecting and normalizing flight/train search results from airline, OTA, and 12306 pages. No unrelated binaries, credentials, or installs are requested.
ℹ
Instruction Scope
Instructions explicitly prefer using a user-opened results page via Browser Relay and recommend browser automation for dynamic/anti-bot sites. That behavior is coherent for the stated goal, but connecting Browser Relay or scraping logged-in pages may expose session/PII in the browser (cookies, account-specific prices, order info). The skill does not instruct collecting credentials or other system files.
✓
Install Mechanism
No install spec or code files are included (instruction-only). Nothing will be written to disk by an installer as part of this skill package.
✓
Credentials
No environment variables, credentials, or config paths are required. The lack of requested secrets aligns with the skill's purpose.
✓
Persistence & Privilege
always is false and the skill is user-invocable. It does not request persistent or elevated privileges or modify other skill configurations.
Assessment
This skill appears to do what it says and asks for nothing excessive, but be cautious before connecting Browser Relay or letting the agent access an open browser tab: those pages may contain logged-in session data, personalized prices, or other sensitive details (cookies, account info, payment fragments). Only connect or share pages that contain the minimal information needed (filtered result pages), avoid pages showing personal orders or payment screens, and confirm which tab the agent should read. If you prefer stricter limits, require the agent to use only public pages or provide an explicit, filtered screenshot/page rather than granting browser access.

Like a lobster shell, security has layers — review code before you run it.

latestvk975hkwgkqh2wsn8xgm289r9zd82wez8

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments