ClawHub

A simple Flight Tracker

v1.1.0

Flight tracking and scheduling. Track live flights in real-time by region, callsign, or airport using OpenSky Network. Search flight schedules between airports. Use for queries like "What flights are over Switzerland?" or "When do flights from Hamburg arrive in Zurich?" or "Track flight SWR123".

⭐ 5· 3.5k·19 current·20 all-time
by@xenofex7
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (OpenSky live tracking + optional AviationStack schedules) matches the included scripts and SKILL.md. No unrelated binaries, credentials, or config paths are requested. The optional AVIATIONSTACK_API_KEY in documentation matches the schedule.py behavior.
ℹ
Instruction Scope
Runtime instructions and scripts only call public APIs (opensky-network and aviationstack) and print results; they do not read arbitrary local files or other environment variables. Minor implementation note: schedule.py uses the AviationStack endpoint with plain HTTP (http://api.aviationstack.com/...), which would send an API key unencrypted if provided — this is an implementation/privacy concern but not evidence of malicious intent.
✓
Install Mechanism
No install spec; the skill is instruction+script based. No archives or external installers are fetched, and all code is included in the package so behavior is inspectable.
✓
Credentials
No required environment variables. One optional env var (AVIATIONSTACK_API_KEY) is justified by the stated optional feature. The scripts only read that single variable when available and do not request unrelated secrets.
✓
Persistence & Privilege
Skill does not request always:true and does not modify system or other skills. It runs as a normal, user-invoked script or via autonomous invocation (platform default).
Assessment
The package is small, self-contained, and consistent with its stated purpose, but review these before installing: 1) Provenance: the skill source is listed as "unknown" in the metadata—if you require strong provenance, prefer packages from trusted authors or registries. 2) API key privacy: if you set AVIATIONSTACK_API_KEY, schedule.py currently uses http://api.aviationstack.com which would transmit the key unencrypted; avoid providing a key unless you confirm HTTPS usage (change to https://api.aviationstack.com/v1/flights) or run the script in an isolated environment. 3) Network access: the scripts make outbound HTTP(S) calls — if you are in a restricted environment, be aware of that. 4) Inspectability: all code is included and readable; you can audit or run it locally before granting any sensitive credentials. 5) Rate limits and account exposure: OpenSky anonymous access is rate-limited (noted in SKILL.md); if you create an AviationStack account, protect that API key and monitor usage.

Like a lobster shell, security has layers — review code before you run it.

aviationvk97b5hv8sh3r8gcr9wn7n8b1097z6wkkflightvk97b5hv8sh3r8gcr9wn7n8b1097z6wkklatestvk971hknmsy1h6e09fdqayhscvh7z8mmjopenskyvk97b5hv8sh3r8gcr9wn7n8b1097z6wkktrackingvk97b5hv8sh3r8gcr9wn7n8b1097z6wkk

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments