← 返回 Skills 市场
Arrivelah
作者
Abhay Bhat
· GitHub ↗
· v1.0.0
440
总下载
0
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install arrivelah
功能描述
One-word trigger for next bus arrival to your destination
使用说明 (SKILL.md)
ArriveLah - Singapore Bus Arrivals
Get your next bus arrival with a single word.
Usage
bus
Returns: Next bus to your saved destination with arrival time.
Configuration
Edit config.json to set:
defaultStop: Your usual bus stop code (e.g., "10051")defaultService: Your usual bus number (e.g., "120")destination: Where you're usually going (for display)
API
Uses the free Arrivelah2 API (https://arrivelah2.busrouter.sg/) No API key required.
Example Output
🚌 Bus 120 → Home
⏰ Next: 2 min (Seats available)
📍 From: Blk 149 Jalan Bukit Merah
安全使用建议
This skill is small and coherent: it reads the provided config.json and issues an HTTPS request to the Arrivelah2 API. Before installing, verify you are comfortable with outbound HTTP requests to the apiUrl in config.json (default: https://arrivelah2.busrouter.sg). Ensure curl and jq are available. If you change apiUrl, only point it to trusted endpoints since the script will send your configured stop ID there. No credentials are requested and no other files or system credentials are accessed.
功能分析
Type: OpenClaw Skill
Name: arrivelah
Version: 1.0.0
The `bus-arrival.sh` script is vulnerable to shell injection. It constructs a `curl` command using values (`API_URL` and `STOP`) directly read from `config.json` without proper sanitization. Since `SKILL.md` explicitly instructs users to edit `config.json`, a malicious user could inject arbitrary shell commands into fields like `defaultStop` or `apiUrl` within `config.json`, leading to remote code execution when the script is executed by the OpenClaw agent.
能力评估
Purpose & Capability
Name/description (one-word trigger for next bus arrival) align with the shipped files: a short bash script and a config.json containing stop/service and apiUrl. Required binaries (curl, jq) are appropriate and expected.
Instruction Scope
SKILL.md confines behavior to reading config.json and calling the Arrivelah2 API. The runtime script only reads its own config file and prints parsed results; it does not reference other system files, credentials, or unexpected endpoints.
Install Mechanism
There is no install spec (instruction-only plus included script), so nothing arbitrary is downloaded or installed. Risk is low because the script is small, readable, and included in the package.
Credentials
The skill requests no environment variables or credentials. It only reads a local config.json. There are no unexplained secrets or cross-service tokens.
Persistence & Privilege
The skill is not always-enabled and does not modify other skills or system settings. It has no persistent background components or privilege-escalating behaviors.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install arrivelah - 安装完成后，直接呼叫该 Skill 的名称或使用
/arrivelah触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release of ArriveLah skill.
- Instantly get next bus arrival times for your saved destination in Singapore.
- One-word trigger: just type "bus" for updates.
- Easy setup—configure your usual stop and bus in `config.json`.
- Uses the free Arrivelah2 API; no API key required.
- Simple, clear output with route, timing, and seat info.
元数据
常见问题
Arrivelah 是什么？
One-word trigger for next bus arrival to your destination. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 440 次。
如何安装 Arrivelah？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install arrivelah」即可一键安装，无需额外配置。
Arrivelah 是免费的吗？
是的，Arrivelah 完全免费（开源免费），可自由下载、安装和使用。
Arrivelah 支持哪些平台？
Arrivelah 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Arrivelah？
由 Abhay Bhat（@abhayjb）开发并维护，当前版本 v1.0.0。
推荐 Skills