Shenzhen Metro
v3.1.1深圳地铁查询工具。查线路、站点、票价、时刻表、换乘、客流等。覆盖美食/商场/停车场等周边信息，及票价优惠、无障碍设施、打卡点等特色功能。（⚠️ 非官方数据，数据为测试用途仅供参考）
⭐ 0· 129·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (Shenzhen metro queries) match the included files and instructions. The skill relies on a local data file (data/metro_facts.json) and optionally the Gaode/AMap API for POI/nearby queries; that requirement is reasonable and expected.
Instruction Scope
SKILL.md confines actions to reading the bundled JSON and optionally calling AMap endpoints (examples shown with curl). It suggests using a TTS tool for audio but gives no concrete external endpoints. The instructions are otherwise scoped to metro queries and surrounding POI info; they do not request unrelated system files or secrets.
Install Mechanism
Instruction-only skill with no install spec and no code to execute — lowest-risk installation surface. Nothing is downloaded or written by an installer.
Credentials
The skill requests the AMap API key via an entry in data/metro_facts.json (amap_api_key). While this is functionally proportional, storing an API key in a local data file is less secure than using environment variables or a secrets store. No other credentials are requested.
Persistence & Privilege
always is false and there are no install scripts or actions that modify other skills or system settings. The skill can be invoked autonomously (default), which is normal for skills and not by itself a concern.
Assessment
This skill appears to do only what it says: answer Shenzhen metro questions using the bundled offline data and optional AMap API calls. Things to consider before installing: (1) If you want AMap-powered nearby/POI queries you must paste your AMap key into data/metro_facts.json — avoid committing that file to version control or sharing it, since storing API keys in repo files is insecure; prefer using a local-only config or environment variable instead. (2) The skill warns data are unverified — double-check critical travel details with official Shenzhen Metro sources. (3) If you enable autonomous invocation, be aware the skill may issue network calls to AMap when asked for POI data; only provide an API key you trust. (4) If you plan to use TTS, confirm which TTS tool will be used and whether it sends audio or text to third-party services.Like a lobster shell, security has layers — review code before you run it.
latestvk97132xy332ncb8hpqxtb59bq983618n
License
MIT-0
Free to use, modify, and redistribute. No attribution required.