ClawHub

Global Flight Route Map - Airport Connections

v1.3.22

Use local All Routes APIs, repo-backed handlers, and optional local MCP for airport, airline, route-map, timetable-context, and dataset-health lookups withou...

⭐ 0· 94·0 current·0 all-time
byGerald He@skylinehk
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
ℹ
Purpose & Capability
The name/description, README, and SKILL.md all describe an offline/local route-discovery skill and the declared footprint (no env vars, no installs) generally matches that purpose. Minor inconsistency: the runtime instructions reference starting the web app and worker with `pnpm --filter ... dev`, but the skill metadata does not list pnpm (or Node) as a required binary. That is a small operational mismatch (you will need pnpm/node to run the local dev servers) but does not contradict the declared purpose.
✓
Instruction Scope
SKILL.md restricts actions to read-only local surfaces (local /api endpoints, optional local anonymous /mcp, and repo-backed handler inspection). It explicitly forbids requiring hosted secrets, scraping third‑party sites, write actions, or browser automation. The instructions ask the agent to inspect repo files and local endpoints — which is appropriate for an offline repository-backed skill.
✓
Install Mechanism
There is no install spec and no code files; this is instruction-only, so nothing is written to disk by the skill itself. The only operational requirement is that the environment running the agent has the normal developer tooling (e.g., pnpm/node) if the agent is expected to start local servers, but the skill does not attempt to install anything.
✓
Credentials
The skill declares no required environment variables or credentials and the documentation explicitly forbids requiring hosted tokens (ALL_ROUTES_MCP_TOKEN). This is proportionate to the offline/local nature of the skill.
✓
Persistence & Privilege
The skill does not request always:true or other elevated persistence. It is user-invocable and allows normal autonomous invocation (disable-model-invocation: false), which is standard for skills and appropriate here. The skill does not instruct modifying other skills or system-wide settings.
Assessment
This skill appears to do what it says: local, read-only route lookups backed by your repo. Before installing/use: (1) Ensure you trust the repository contents because the agent will be instructed to read repo files (any secrets in the repo could be exposed in responses). (2) If you want the agent to start local servers, make sure pnpm/node are available on the host (the metadata doesn't list pnpm as a required binary). (3) Confirm your environment isolates localhost services you allow the agent to contact (local anonymous MCP is intended for localhost-only). (4) If you plan to allow autonomous agent invocation, be aware the agent can call the local endpoints and read files — ensure the local repo and dev servers do not contain sensitive credentials or private data.

Like a lobster shell, security has layers — review code before you run it.

aviationvk975h58wnn70a4aazt5kvgwq7x83ac4slatestvk97dbgtynd64eprq2epehxe4v183ajvymcpvk975h58wnn70a4aazt5kvgwq7x83ac4sofflinevk975h58wnn70a4aazt5kvgwq7x83ac4sroutesvk975h58wnn70a4aazt5kvgwq7x83ac4stravelvk975h58wnn70a4aazt5kvgwq7x83ac4s

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments