ClawHub

Scotty - AT Public Transport Service (ÖBB)

v1.0.0

Austrian rail travel planner (ÖBB Scotty). Use when planning train journeys in Austria, checking departures/arrivals at stations, or looking for service disruptions. Covers ÖBB trains, S-Bahn, regional trains, and connections to neighboring countries.

⭐ 1· 1.9k·2 current·2 all-time
by@manmal
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
ℹ
Purpose & Capability
The skill's name/description and the code files align: all scripts call the ÖBB mgate API for station search, trip planning, departures/arrivals, and disruptions. Minor mismatch: the package metadata declares no required binaries, but the scripts clearly require curl and jq to run.
✓
Instruction Scope
SKILL.md and included shell scripts limit themselves to building JSON requests, calling https://fahrplan.oebb.at/bin/mgate.exe, and parsing JSON results. They do not read unrelated files, environment variables, or contact other endpoints.
✓
Install Mechanism
There is no install spec (instruction-only with helper scripts). This is low-risk because nothing is downloaded or installed automatically.
✓
Credentials
The skill requests no environment variables or credentials. The scripts embed a hard-coded 'aid' value in requests (OWDL4fE4ixNiPBBm), which appears to be a public client identifier used by the API rather than a secret; no unrelated credentials are requested.
✓
Persistence & Privilege
always is false and the skill does not attempt to modify agent/system configuration or require permanent presence. Autonomous invocation is allowed (default) but the skill's scope is limited to querying the public ÖBB endpoint.
Assessment
This skill appears to do what it says: it calls the ÖBB Scotty (HAFAS mgate) API and formats responses. Before installing, note: (1) the scripts require curl and jq but the metadata doesn't declare those dependencies—ensure those binaries are present; (2) queries are sent to fahrplan.oebb.at and include station names/coordinates (privacy: these queries go to ÖBB); (3) the scripts embed a public AID value in requests (not a secret), which may change or be rate-limited by ÖBB; (4) there is no automatic installer, so review or run the shell scripts in a sandbox if you have concerns. If you prefer to avoid any outbound network calls, do not enable the skill or disable autonomous invocation in the agent settings.

Like a lobster shell, security has layers — review code before you run it.

latestvk97ek2rcf45bbt9q2hpnqcv4497yw4ma

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments