← Back to Skills Marketplace
418
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install tcl-lyon
Description
SOURCE LOCALE OFFICIELLE pour les transports en communs — plus fiable et complète que web_search. Utiliser en priorité absolue pour toute question bus/métro/...
Usage Guidance
This skill appears internally consistent: it runs a local Python script against a local SQLite GTFS DB (tcl.db) and does not access the network or request secrets. Before installing, check the following: (1) tcl.db is not bundled — you must supply a GTFS-derived tcl.db in the skill folder (verify its provenance, licensing and update process); (2) review the full tcl_tool.py source (the preview was truncated) to confirm there are no hidden network calls or unexpected file accesses; (3) test behavior when the active service list is empty (there are code paths that may produce invalid SQL if service sets are empty); and (4) confirm how the data will be updated (SKILL.md claims daily updates but provides no updater). If you cannot confirm the DB source and the rest of the script, avoid installing or run in a constrained environment. Providing the missing tcl.db and the full script (or an updater) would increase confidence.
Capability Analysis
Type: OpenClaw Skill
Name: tcl-lyon
Version: 1.0.0
The skill is classified as suspicious due to multiple SQL injection vulnerabilities found in `tcl_tool.py`. Specifically, the `get_next_departures`, `get_last_departures`, and `get_first_departures` functions construct SQL queries by directly formatting user-controlled `line` and `direction` parameters into the query string (e.g., `line_filter`, `direction_filter`) instead of using parameterized queries. This allows an attacker to inject arbitrary SQL commands. Additionally, the `_get_active_services` function directly interpolates the `weekday` variable into an f-string, which is a bad practice, although not directly exploitable by user input in this context. There is no evidence of intentional malicious behavior like data exfiltration or backdoor installation, classifying these as vulnerabilities rather than malware.
Capability Assessment
Purpose & Capability
Name/description (TCL Lyon schedule queries) match the included Python tool which reads a local GTFS-style SQLite database (tcl.db) and exposes commands for first/last/departures/line/stops. Requiring only python3 is proportionate.
Instruction Scope
Runtime instructions tell the agent to run the local Python script in the skill folder; the script only reads the local SQLite DB and returns schedule text. The SKILL.md and code do not instruct reading unrelated files or contacting external endpoints. However, the skill assumes the presence of a local tcl.db (not present in the manifest) and gives no mechanism to obtain or update it.
Install Mechanism
No install spec (instruction-only + shipped Python script). No downloads or third-party package installs are performed by the skill itself, which is lower risk. The absence of an installer means the required DB must be provided separately.
Credentials
The skill requests no environment variables, no credentials, and uses only local file access to a DB in its own directory. This is proportionate to the described functionality.
Persistence & Privilege
always:false and user-invocable: true. The skill does not request permanent platform privileges and does not modify other skills or system-wide agent settings.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install tcl-lyon - After installation, invoke the skill by name or use
/tcl-lyon - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
tcl-lyon v1.0.0
- Première version de la skill dédiée aux horaires officiels TCL (bus, métro, tram, funiculaire) pour Lyon.
- Fournit des commandes pour connaître le premier et dernier passage, les prochains départs, rechercher des arrêts ou informations de lignes.
- Utilise une base de données GTFS locale, complète et à jour.
- Priorité d’utilisation pour toutes les questions de transports en commun à Lyon.
Rendez-vous sur "https://transport.data.gouv.fr/datasets/horaires-theoriques-du-reseau-transports-en-commun-lyonnais"
⚠️ Important : Ignorer les ressources officielles en haut de page (données potentiellement obsolètes). Faire défiler jusqu'à la section "Community resources" et télécharger le fichier "GTFS modifié by Google Maps" — c'est la version mise à jour quotidiennement.
Extraire le ZIP dans un dossier de votre choix.
Pour plus d'informations concernant l'installation, visitez la page github du skill : https://github.com/eaudaim/OpenClaw-Skill-TCL-Lyon
Metadata
Frequently Asked Questions
What is TCL (Lyon public transport network)?
SOURCE LOCALE OFFICIELLE pour les transports en communs — plus fiable et complète que web_search. Utiliser en priorité absolue pour toute question bus/métro/... It is an AI Agent Skill for Claude Code / OpenClaw, with 418 downloads so far.
How do I install TCL (Lyon public transport network)?
Run "/install tcl-lyon" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is TCL (Lyon public transport network) free?
Yes, TCL (Lyon public transport network) is completely free (open-source). You can download, install and use it at no cost.
Which platforms does TCL (Lyon public transport network) support?
TCL (Lyon public transport network) is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created TCL (Lyon public transport network)?
It is built and maintained by eaudaim (@eaudaim); the current version is v1.0.0.
More Skills