train assistant

分贝通火车预订助手，实时查询火车票、展示车次列表、预订火车票、查看订单、取消订单。Invoke when user wants to search trains, book train tickets, check train orders, or cancel train bookings.

This skill appears to do what it claims: call FenbeiTong APIs to search, book, query, and cancel train tickets. Before installing, confirm you trust the FenbeiTong endpoints and the skill source because booking requires submitting personal data (name, ID number, phone) to those external servers. The skill does not request extra credentials or install third‑party packages, but it will make outbound HTTPS requests — avoid running it in environments where sending PII or other sensitive data to external services is unacceptable. If you need tighter control, ask the publisher for privacy/policy documentation or a means to configure your own API credentials/endpoints instead of using the hardcoded X-App-Id.

Type: OpenClaw Skill Name: train-assistant Version: 1.0.0 The skill is a train booking assistant for the Fenbeitong platform that handles sensitive Personal Identifiable Information (PII), including names, ID card numbers, and phone numbers. It performs external network requests to 'openapiv2.fenbeitong.com' and 'app-gate.fenbeitong.com' to process bookings and payments. While the code in 'scripts/fb_train_api.py' and 'scripts/openai_adapter.py' appears aligned with its stated purpose, it contains hardcoded identifiers (X_APP_ID and an unused EMP_ID), which is a poor security practice. The inherent risk of handling PII and the use of hardcoded credentials/IDs without environment variable configuration warrants a suspicious classification despite the lack of clear malicious intent.