ClawHub

rail-cli

v0.2.1

UK National Rail CLI — live departures, arrivals, station search, destination filtering, batch station search from stdin, and lightweight field selection for...

⭐ 0· 134·0 current·0 all-time
by@shan8851
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description describe a National Rail CLI and the skill requires the 'rail' binary and (as primary credential) a Darwin access token — both are coherent with departures/arrivals functionality. Minor metadata inconsistency: registry metadata lists 'Required env vars: none' while the skill declares DARWIN_ACCESS_TOKEN as primaryEnv and SKILL.md documents it is required for departures/arrivals.
✓
Instruction Scope
SKILL.md instructs the agent to run the 'rail' CLI and describes its flags and JSON/text outputs. It does not ask the agent to read unrelated files, access other system credentials, or transmit data to unexpected endpoints. It does advise installing via 'npm install -g', which is an installation step but not scope creep in itself.
ℹ
Install Mechanism
Install is via an npm package (@shan8851/rail-cli) that creates the 'rail' binary. npm is a standard distribution channel for CLIs, but package content is not included here — recommend verifying the package author, reviewing the package source repository, and confirming the package on the npm registry before global installation.
✓
Credentials
Only DARWIN_ACCESS_TOKEN (required for departures/arrivals) and an optional RAIL_API_URL are referenced; this matches the declared functionality. The small inconsistency between 'Required env vars: none' in registry metadata and the declared primaryEnv should be noted but doesn't change proportionality.
✓
Persistence & Privilege
The skill is not always-enabled and does not request persistent elevated privileges. The only persistent effect would be installing a global npm binary if the user follows installation instructions — a normal expectation for a CLI.
Assessment
This skill appears coherent for a National Rail CLI. Before installing: verify the npm package (@shan8851/rail-cli) on the npm registry and its source repo/author, confirm the homepage matches the package, and review the package code if possible. Be aware 'npm install -g' writes a global binary (may require elevated permissions). The DARWIN_ACCESS_TOKEN is a legitimate National Rail token — obtain it from the official registration page. If you want extra caution, run the CLI in a restricted environment or container first to observe behavior.

Like a lobster shell, security has layers — review code before you run it.

latestvk973n8xbsm9e5tmd3t24kd7bsh83k1t8

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🚂 Clawdis
Binsrail
Primary envDARWIN_ACCESS_TOKEN

Install

Install rail-cli (npm)
Bins: rail
npm i -g @shan8851/rail-cli

Comments