Skanetrafiken Trip Planner
v1.2.0Skåne public transport trip planner (Skånetrafiken). Plans bus/train journeys with real-time delays. Supports stations, addresses, landmarks, and cross-border trips to Copenhagen.
⭐ 2· 2k·0 current·0 all-time
by@rezkam
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill's name and description match what the included scripts do: searching locations and querying journeys from Skånetrafiken APIs. One minor inconsistency: SKILL.md and the shell scripts require curl and jq (and rely on the system 'date' command), but the registry metadata lists no required binaries — users should ensure the agent environment actually has curl, jq, and a compatible date implementation installed.
Instruction Scope
The runtime instructions and the scripts limit actions to: calling Skånetrafiken HTTPS endpoints (/Points and /Journey), parsing JSON with jq, converting timezones, and formatting output. The scripts use /tmp for transient files and remove them on exit. There are no instructions to read unrelated files, access other services, or transmit data to third-party endpoints.
Install Mechanism
There is no remote install spec (no downloads or installers). The skill is instruction-and-script based; all code is present in the package. This is lower risk because nothing is fetched or executed from arbitrary URLs at install time.
Credentials
The skill requests no credentials or environment variables (good). It does, however, depend on local CLI tools (curl, jq, and date). Those dependencies are reasonable for the stated purpose but were not declared in the registry metadata — a minor mismatch to be aware of. The scripts also accept coordinates/IDs which may include a user's private home address if provided; no secrets are required or transmitted.
Persistence & Privilege
The skill does not request permanent presence, elevated privileges, or system-wide configuration changes. 'always' is false and the scripts do not modify other skills or global agent settings.
Assessment
This skill appears to do what it says: call Skånetrafiken's APIs and format trip results. Before installing, confirm the agent environment includes curl, jq, and a standard date utility (GNU or BSD) because the scripts rely on them even though the registry metadata didn't list them. No credentials are requested, and API calls go to skanetrafiken.se only. Be mindful that you (or users) may pass private locations or home addresses as query input — the skill will send those coordinates/IDs to the public transport API. If you need offline use or stricter privacy, avoid sending sensitive addresses or host the scripts in an environment you control.Like a lobster shell, security has layers — review code before you run it.
latestvk977n53tqxwc2d7be49ta2x1n17z8hrk
License
MIT-0
Free to use, modify, and redistribute. No attribution required.