Back to skill
Skillv0.1.7
VirusTotal security
TTC CLI · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 30, 2026, 5:03 AM
- Hash
- 29b799fb3fe24212af4c4c7faf1d3101ce606288e6be992bccd9f116d492efad
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: ttc Version: 0.1.7 The 'ttc' skill bundle is a legitimate utility for accessing Toronto Transit Commission real-time data. It uses standard GTFS-RT feeds from official sources (bustime.ttc.ca) and bundles static transit data from Toronto Open Data. The package includes a post-install script (scripts/postinstall.js) that creates a symlink in ~/.claude/skills for integration with Claude Code and compiles a Swift-based location helper for macOS to handle CoreLocation permissions. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found; all high-privileged operations (like location access) are aligned with the stated purpose of finding nearby transit stops.
- External report
- View on VirusTotal