A nach B - AT Public Transport Service (VOR)
PassAudited by ClawScan on May 1, 2026.
Overview
This looks like a benign public-transport lookup skill, with disclosed HAFAS API calls and minor metadata/documentation gaps.
This skill appears safe for normal Austrian public-transport lookups. Before using it, be aware that your station and route queries go to the disclosed HAFAS endpoint, and make sure local tools such as curl and jq are available.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Your station names, station IDs, or route interests may be sent to the external HAFAS service when the skill is used.
The skill sends station searches, departure requests, route-planning inputs, and disruption queries to this external HAFAS endpoint. This is disclosed and purpose-aligned, but travel/location queries may still be personal.
**Endpoint:** `https://vao.demo.hafas.de/gate`
Use it only for travel queries you are comfortable sending to the disclosed transit API; the maintainer could add an explicit privacy note about external API use.
The skill may not work unless the expected local command-line tools are already installed.
The script depends on local tools such as curl and jq, while the registry metadata declares no required binaries and no install spec. This is under-declared dependency information, though the commands are visible and purpose-aligned.
curl -s -X POST "https://vao.demo.hafas.de/gate" \ ... | jq '
Declare bash, curl, and jq as required binaries, and provide a homepage or provenance link if available.