Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Table Mountain Status

v1.0.0

Fetch and report the Table Mountain Aerial Cableway status via the official weather API. Use when Master asks for “Tafelberg” updates, needs alerts about openings/closures, or wants automated Telegram reports about status, weather, and waiting times.

0· 712·0 current·0 all-time
byAndreas Jung@zopyx
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description match the included script and README: the Python script fetches JSON from a Table Mountain API and formats/writes a summary. Nothing requested (no credentials, no unrelated binaries) appears out of scope for this purpose.
Instruction Scope
SKILL.md only instructs running the included script, writing output to local files, and setting up a cron job that asks the agent to post the summary to Telegram. The instructions do not ask the agent to read arbitrary system files or access credentials belonging to other services. The cron example assumes the agent has an external Telegram integration configured but does not attempt to capture Telegram credentials itself.
Install Mechanism
No install specification — instruction-only with an included small Python script. No downloads from external or untrusted URLs and no package installs are requested.
Credentials
The skill declares no environment variables or credentials and the script does not read sensitive environment variables. It may respect standard HTTP proxy environment variables (noted in SKILL.md) which is reasonable. The skill suggests posting to Telegram but does not request Telegram credentials itself.
Persistence & Privilege
Skill does not request always:true, does not modify other skills or system-wide configuration, and only writes its own output files under data/table-mountain by default. Autonomous invocation is allowed but is the platform default and not combined with other concerning privileges here.
Assessment
This skill appears to do exactly what it says: fetch a JSON status from a Table Mountain API and write a human-readable or JSON summary. Things to check before installing: 1) confirm you are comfortable the agent will access the network (the script calls a live URL) and that hitting the API at the shown path is permitted; 2) ensure you want periodic cron jobs writing files to data/table-mountain and decide on retention/permissions for those files; 3) if you plan to use the SKILL.md's Telegram example, verify your agent's Telegram integration is configured securely (this skill does not provide or request Telegram credentials); 4) if you have strict egress controls confirm the domain cms.tablemountain.net is allowed. If any of those are concerns, review or modify the script/cron schedule before enabling automated runs.

Like a lobster shell, security has layers — review code before you run it.

latestvk97bfa29na48ex26h653aednfd8125bm
712downloads
0stars
1versions
Updated 6h ago
v1.0.0
MIT-0

Table Mountain Status

Überblick

Dieses Skill ruft die offizielle Cableway-API (https://cms.tablemountain.net/.../weather-api) ab, parsed Status/Weather-Felder und liefert eine saubere Zusammenfassung (Text oder JSON). Ideal für Sofortabfragen („Status Tafelberg?“) sowie automatisierte Polling-Jobs mit Telegram-Alerts.

Quick Start

  1. Manuell abrufen

    python3 skills/table-mountain-status/scripts/fetch_status.py \
      --output data/table-mountain/$(date +%F_%H%M).txt
    

    Ausgabe erscheint sowohl in der Datei als auch im Terminal.

  2. JSON für Weiterverarbeitung

    python3 skills/table-mountain-status/scripts/fetch_status.py \
      --format json --output data/table-mountain/$(date +%F).json
    
  3. Felder (bereits im Script enthalten): statusType, status, temperature, visibility, wind, firstUp, lastUp, lastDown, waitingTimeBottom, waitingTimeTop, lastUpdated.

Automatisierte Telegram-Alerts

  1. Cronjob alle 10 Minuten (Beispiel):
    openclaw cron add <<'JSON'
    {
      "name": "table-mountain-10min",
      "schedule": { "kind": "every", "everyMs": 600000 },
      "sessionTarget": "isolated",
      "payload": {
        "kind": "agentTurn",
        "model": "default",
        "message": "Run `python3 skills/table-mountain-status/scripts/fetch_status.py --output data/table-mountain/latest.txt`. Post the summary to Master on Telegram, highlight status (open/closed), weather, queues, and timestamp. If the fetch fails, report the error."
      }
    }
    JSON
    
  2. Temporäre Jobs (z. B. nur bis 16:00 lokal) → schedule.kind = "cron", expr = "*/10 6-15 * * *", tz = "Europe/Berlin", und nach Ende wieder cron update --enabled=false oder cron remove.
  3. Job-Stop: Immer sowohl Interval- als auch Tagesjob deaktivieren, falls mehrere Instanzen laufen.

Troubleshooting

  • API down / Consent-Block: Script liefert Exit-Code 1 + Fehlermeldung → Cron meldet den Fehler weiter.
  • Zeitzonen: lastUpdated wird auf UTC+2 konvertiert (Cape Town). Bei Bedarf format_summary im Script anpassen.
  • Standard-Wartezeiten (0:05:00) stammen oft vom API-Default; wenn echte Queue benötigt wird, Hinweis im Bericht ergänzen.
  • Netzwerk-Limits: Falls curl-Proxy nötig, urllib ggf. um Environment-Proxy erweitern.

Ressourcen

  • scripts/fetch_status.py – Einfache CLI zum Abrufen, Formatieren und Speichern (Text/JSON) des Table-Mountain-Status.

Comments

Loading comments...