← Back to Skills Marketplace
284
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install youbike-mcp
Description
提供台北市、新北市及桃園市 YouBike 2.0 站點的即時狀態查詢,支援經緯度近鄰搜尋及關鍵字搜尋。
Usage Guidance
This skill appears coherent and low-risk: it only fetches public YouBike JSON feeds and exposes two query tools. Before installing, review the package-lock and source if you want to verify third-party dependencies, run npm install and tests in a sandboxed environment (container/VM) if you have any doubt, and only run the server if you trust the package source. There are no requested credentials or hidden endpoints to be concerned about.
Capability Analysis
Type: OpenClaw Skill
Name: youbike-mcp
Version: 1.0.2
The skill bundle provides a functional YouBike station search tool for Taiwan, but it contains significant supply chain anomalies. The package.json and package-lock.json files reference non-existent or future versions of several dependencies (e.g., axios 1.13.6, zod 4.3.6, and express 5.2.1), and the _meta.json file includes a publication timestamp from the year 2026. While the core logic in src/index.js appears benign and correctly implements the stated features using legitimate public API endpoints, these versioning irregularities are strong indicators of an untrusted or synthetic origin that could be used for dependency confusion.
Capability Assessment
Purpose & Capability
Name/description match the implemented features: two tools (nearby search and keyword search) querying the three public YouBike data endpoints. No unrelated credentials, binaries, or capabilities are requested.
Instruction Scope
SKILL.md instructs standard developer actions (npm install, npm start, npm test). Runtime handlers only fetch public JSON endpoints and format results; they don't read local secrets or unrelated files.
Install Mechanism
There is no platform-level install spec (this is instruction-driven). The package includes a package-lock.json and depends on npm packages (including @modelcontextprotocol/sdk, axios, zod). Installing requires npm install which will write node_modules to disk — standard for Node projects but worth noting if you only expect an instruction-only skill.
Credentials
The skill requires no environment variables, no credentials, and accesses only public HTTP endpoints for Taipei/New Taipei/Taoyuan open data. No secret exfiltration evident.
Persistence & Privilege
Flags show always:false and normal autonomous invocation allowed. The skill does not modify other skills or request persistent elevated privileges.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install youbike-mcp - After installation, invoke the skill by name or use
/youbike-mcp - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.2
- Added new file `query-nearby.js` to the project.
- Modified `src/index.js`, likely to integrate or support the new query-nearby functionality.
- No breaking changes; existing features remain unchanged.
v1.0.1
- 新增 SKILL.md 說明文件,詳細列出功能、資料來源與本地開發方式
- 明確說明支援台北市、新北市、桃園市 YouBike 2.0 站點的即時狀態查詢
- 介紹經緯度近鄰搜尋與關鍵字搜尋功能
Metadata
Frequently Asked Questions
What is Youbike Mcp?
提供台北市、新北市及桃園市 YouBike 2.0 站點的即時狀態查詢,支援經緯度近鄰搜尋及關鍵字搜尋。 It is an AI Agent Skill for Claude Code / OpenClaw, with 284 downloads so far.
How do I install Youbike Mcp?
Run "/install youbike-mcp" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Youbike Mcp free?
Yes, Youbike Mcp is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Youbike Mcp support?
Youbike Mcp is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Youbike Mcp?
It is built and maintained by dabendan (@dabendan2); the current version is v1.0.2.
More Skills