← Back to Skills Marketplace
443
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install openclaw-commute-traffic
Description
Check real-time traffic conditions for a route between two locations using TomTom. Use when the user asks about traffic, commute time, best time to leave, dr...
Usage Guidance
This skill appears to do exactly what it claims: it sends user-supplied origin/destination strings to TomTom and returns route and traffic data. Before installing: (1) decide where the TomTom API key will be stored and who can read that Kubernetes secret (limit access); (2) be aware that addresses and coordinates provided by users are transmitted to TomTom — avoid using the skill to look up sensitive or private locations without explicit consent; (3) note the geocoding bias to Switzerland (countrySet=CH) — if you expect global use, update the script or queries; (4) the free tier has rate limits (~830 checks/day), so monitor quota usage.
Capability Analysis
Type: OpenClaw Skill
Name: openclaw-commute-traffic
Version: 0.1.0
The skill bundle is classified as suspicious due to a potential shell injection vulnerability in the `SKILL.md` instructions. The AI agent is instructed to execute a `python3` command with user-provided origin and destination, enclosed in double quotes. If the agent fails to properly sanitize or escape user input containing special characters (e.g., an embedded double quote or command separator), it could lead to arbitrary command execution on the host system. While the `scripts/check_traffic.py` code itself correctly uses `urllib.parse.quote` for URL parameters, the initial command construction by the agent remains a critical vulnerability point, not malicious intent within the skill's code.
Capability Assessment
Purpose & Capability
Name/description, required binary (python3), required env (TOMTOM_API_KEY), SKILL.md, INSTALL.md, and the included script all consistently implement TomTom geocoding and routing. The script uses only the TomTom API and standard library; the TOMTOM_API_KEY is the expected credential. Note: the code biases geocoding to Switzerland (countrySet=CH), which is coherent with examples but may surprise users outside CH.
Instruction Scope
SKILL.md limits runtime actions to extracting origin/destination from conversational context and running the included script; the script only performs API calls to TomTom and outputs structured JSON. One behavioral note: SKILL.md suggests using a user's 'known' home/office/regular commute if available — this can surface personal location data and should only be done with user consent. Otherwise the instructions stay within the declared purpose.
Install Mechanism
No install spec (instruction-only) and the provided INSTALL.md only instructs copying files and setting an env var/secret in Kubernetes. There are no downloads or third‑party package installs; the script relies on Python stdlib.
Credentials
Only TOMTOM_API_KEY is required and is the primary credential declared. The install instructions use a Kubernetes secret to expose this key — expected for an API-based skill. No other secrets, tokens, or config paths are requested.
Persistence & Privilege
always is false and the skill does not request persistent/global privileges or modify other skills. Autonomous invocation is allowed (platform default) but not combined with extra privileges or broad credential access.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install openclaw-commute-traffic - After installation, invoke the skill by name or use
/openclaw-commute-traffic - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.0
**Major update for commute-traffic: now smarter at understanding user queries and delivers clear, real-time TomTom traffic info.**
- Determines origin and destination dynamically from the user's conversation, with guidance on resolving missing details.
- Accepts any address, city, landmark, or coordinate as input; no rigid format required.
- Presents practical commute advice, including current travel time, delay, alternative routes, and clear recommendations.
- Provides robust error-handling for missing API keys, vague locations, and route issues.
- Updated to version 2.0.0 with improved conversational context support and user-oriented results.
Metadata
Frequently Asked Questions
What is Commute Traffic?
Check real-time traffic conditions for a route between two locations using TomTom. Use when the user asks about traffic, commute time, best time to leave, dr... It is an AI Agent Skill for Claude Code / OpenClaw, with 443 downloads so far.
How do I install Commute Traffic?
Run "/install openclaw-commute-traffic" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Commute Traffic free?
Yes, Commute Traffic is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Commute Traffic support?
Commute Traffic is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Commute Traffic?
It is built and maintained by Xavjer (@xavjer); the current version is v0.1.0.
More Skills