Back to skill
v1.0.0
Swiss Public Transport
BenignClawScan verdict for this skill. Analyzed May 1, 2026, 4:50 AM.
Analysis
This skill appears to only query the public Swiss transport API for schedules, with no credentials, persistence, install step, or suspicious code behavior.
GuidanceThis skill looks safe for normal schedule and route queries. Be aware that the station names, routes, dates, and times you ask about are sent to transport.opendata.ch to retrieve results.
Findings (1)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Sensitive data protection
Checks for exposed credentials, poisoned memory or context, unclear communication boundaries, or sensitive data that could leave the user's control.
Insecure Inter-Agent Communication
SeverityLowConfidenceHighStatusNote
scripts/journey.py
url = f"https://transport.opendata.ch/v1/connections?{urllib.parse.urlencode(params)}"The helper script sends user-provided origin, destination, limit, date, and time values to the external transport.opendata.ch API. This is disclosed and purpose-aligned, but users should understand their travel queries leave the local environment.
User impactTravel searches such as origin, destination, and requested time may be visible to the public API provider.
RecommendationUse the skill as intended for public transport planning, and avoid entering highly sensitive personal travel details if that is a concern.
