Swiss Public Transport

PassAudited by ClawScan on May 1, 2026.

Overview

This skill appears to only query the public Swiss transport API for schedules, with no credentials, persistence, install step, or suspicious code behavior.

This skill looks safe for normal schedule and route queries. Be aware that the station names, routes, dates, and times you ask about are sent to transport.opendata.ch to retrieve results.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Note

ASI07: Insecure Inter-Agent Communication

What this means

Travel searches such as origin, destination, and requested time may be visible to the public API provider.

Why it was flagged

The helper script sends user-provided origin, destination, limit, date, and time values to the external transport.opendata.ch API. This is disclosed and purpose-aligned, but users should understand their travel queries leave the local environment.

Skill content

url = f"https://transport.opendata.ch/v1/connections?{urllib.parse.urlencode(params)}"

Recommendation

Use the skill as intended for public transport planning, and avoid entering highly sensitive personal travel details if that is a concern.