French Services

Accédez aux services français : horaires trains SNCF, suivi colis La Poste, météo, et information trafic transports en Île-de-France.

Security Scan

The package contains legitimate-looking scripts for French public services (SNCF, La Poste, RATP, Open‑Meteo) but the registry metadata omits required API key environment variables declared in SKILL.md and the scripts — an incoherence worth investigating before install.

Purpose & Capability

The scripts clearly implement SNCF (Navitia), La Poste, IDFM/RATP and Open‑Meteo functionality and require API keys (SNCF_API_KEY, LAPOSTE_API_KEY, IDFM_API_KEY) per SKILL.md and references/api-setup.md. However the registry metadata lists no required environment variables or primary credential. That mismatch (code & docs expect secrets but metadata doesn't declare them) is an inconsistency that should be resolved.

Instruction Scope

SKILL.md instructs running the included Python scripts and points to the included references/api-setup.md. The runtime instructions and code only call official public APIs (navitia.io, api.laposte.fr, api.open-meteo.com, prim.iledefrance-mobilites.fr), read environment variables for API keys, and format output. I saw no instructions to read arbitrary local files, traverse user home directories, or send data to unexpected endpoints.

Install Mechanism

No install spec is provided (instruction-only). The repository includes Python scripts that use only the standard library. No downloads, package installs, or extraction from external URLs are performed by an install step.

Credentials

The number and type of environment variables required by the scripts (three API keys) are proportionate to the stated features. However the skill registry metadata does not declare these required env vars or a primary credential, which is inconsistent and could lead to accidental credential exposure (users may put keys in shell profiles or .env as suggested).

Persistence & Privilege

The skill does not request persistent/global privileges (always is false). The code does not modify other skills or system-wide agent settings and does not persist credentials itself. Normal runtime requires the process environment to contain API keys if the user wants the authenticated endpoints to work.

What to consider before installing

This skill appears to be a straightforward aggregator of French public-service APIs and the code uses only the Python standard library and well-known service endpoints. However: (1) the registry metadata does not list the API keys the scripts require — confirm with the publisher why metadata and SKILL.md disagree before installing. (2) If you install, avoid placing API keys in plain shell profiles (~/.bashrc, ~/.zshrc) if you want them unexposed; prefer the platform's secret storage or per-workspace environment secrets rather than a repo .env in source. (3) Inspect the full, untruncated files (ensure there are no hidden network calls or obfuscated code in the truncated sections) and consider running the scripts in an isolated environment the first time. (4) If you don't need authenticated features, the meteo script works without keys. If the author updates metadata to declare required env vars and primary credential, the incoherence concern will be resolved.

French Services — Services français du quotidien

Skill pour accéder aux services français : trains SNCF, suivi colis La Poste, météo, transports IDF.

Scripts disponibles

Tous dans skills/french-services/scripts/. Utilisent uniquement la stdlib Python (pas de dépendances).

🚄 SNCF — Trains (sncf.py)

Recherche d'itinéraires et prochains départs via l'API Navitia.

# Rechercher un trajet
python3 scripts/sncf.py search Paris Lyon
python3 scripts/sncf.py search "Gare de Lyon" Marseille --date 2025-01-15 --time 08:00

# Prochains départs depuis une gare
python3 scripts/sncf.py departures Paris

# Perturbations sur une ligne
python3 scripts/sncf.py disruptions

API key requise : SNCF_API_KEY (token Navitia — gratuit sur https://navitia.io)

📦 La Poste — Suivi de colis (laposte.py)

# Suivre un colis
python3 scripts/laposte.py track 6A12345678901

# Suivre plusieurs colis
python3 scripts/laposte.py track 6A12345678901 8R98765432109

API key requise : LAPOSTE_API_KEY (gratuit sur https://developer.laposte.fr)

🌤️ Météo (meteo.py)

Météo actuelle et prévisions via Open-Meteo (modèle Météo France). Pas de clé API nécessaire.

# Météo actuelle + prévisions 3 jours
python3 scripts/meteo.py Paris
python3 scripts/meteo.py Lyon --days 7
python3 scripts/meteo.py --lat 43.6 --lon 1.44    # Toulouse par coordonnées

# Format JSON
python3 scripts/meteo.py Paris --json

🚇 RATP/IDFM — Transports IDF (ratp.py)

État du trafic et prochains passages en Île-de-France via l'API PRIM.

# État du trafic global
python3 scripts/ratp.py traffic

# État d'une ligne spécifique
python3 scripts/ratp.py traffic --line "Métro 13"
python3 scripts/ratp.py traffic --line "RER A"

# Prochains passages à un arrêt
python3 scripts/ratp.py next "Châtelet"

API key requise : IDFM_API_KEY (gratuit sur https://prim.iledefrance-mobilites.fr)

Options communes

Option	Description
--json	Sortie JSON au lieu du texte lisible
--help	Aide du script

Env vars

Variable	Service	Obtention
SNCF_API_KEY	SNCF	https://navitia.io (gratuit, 5000 req/mois)
LAPOSTE_API_KEY	La Poste	https://developer.laposte.fr
IDFM_API_KEY	RATP/IDFM	https://prim.iledefrance-mobilites.fr

Voir references/api-setup.md pour le guide de configuration détaillé.

Quand utiliser quel script

Question de l'utilisateur	Script
"Prochain train pour Lyon"	sncf.py
"Horaires Paris-Marseille demain matin"	sncf.py
"Où en est mon colis 6A123..."	laposte.py
"Il fait quoi demain ?" / "Météo à Nice"	meteo.py
"Le métro 13 marche ?" / "État du RER A"	ratp.py
"Prochain métro à Châtelet"	ratp.py

Notes

• La météo fonctionne sans aucune configuration (Open-Meteo est gratuit et sans clé)
• Pour les autres services, configurer les API keys selon references/api-setup.md
• Les scripts gèrent proprement l'absence de clé API avec un message explicatif
• Output en français par défaut, --json pour l'intégration machine