功能描述

Query Île-de-France Mobilités (IDFM) PRIM/Navitia for place resolution, journey planning, and disruptions/incident checks. Use when asked to find routes in Île-de-France (e.g., "itinéraire de X à Y"), resolve station/stop ids, or check RER/metro line disruptions, and you have an IDFM PRIM API key.

使用说明 (SKILL.md)

IDFM Journey (PRIM/Navitia)

Name: IDFM Journey (PRIM/Navitia)
Author: anthonymq

Use the bundled script to call PRIM/Navitia endpoints without extra dependencies.

Prereqs

Set IDFM_PRIM_API_KEY in the environment before running.

Quick commands

Run from anywhere (path is inside the skill folder):

Resolve places (best match + list):
- python3 scripts/idfm.py places "Ivry-sur-Seine" --count 5
Journeys (free-text from/to; resolves place ids first):
- python3 scripts/idfm.py journeys --from "Ivry-sur-Seine" --to "Boulainvilliers" --count 3
Incidents / disruptions (by line id or filter):
- python3 scripts/idfm.py incidents --line-id line:IDFM:C01727
- python3 scripts/idfm.py incidents --filter 'disruption.status=active'

Add --json to print raw API output.

Notes

If place resolution is ambiguous, increase --count and choose the right stop_area id.
For API details and examples, read: references/idfm-prim.md.

安全使用建议

This skill appears to do exactly what it says: call Île‑de‑France PRIM/Navitia endpoints using your IDFM_PRIM_API_KEY. If you plan to install it: (1) only provide your IDFM API key if you trust the skill; the key is required to use the API. (2) Review the small script (it's pure Python, standard library) yourself if you can — it is readable and uses the documented PRIM base URL. (3) Be cautious if you or the agent override --base-url to an untrusted host, since that could send your API key elsewhere. Rotate the key if you suspect it was exposed.

功能分析

Type: OpenClaw Skill Name: Developer: Version: Description: OpenClaw Agent Skill Suspicious High-Entropy/Eval files: 1 The skill bundle is benign. It provides a Python script to query the Île-de-France Mobilités (IDFM) PRIM/Navitia API for journey planning and disruptions. The script (`scripts/idfm.py`) correctly reads the `IDFM_PRIM_API_KEY` environment variable for authentication and makes HTTP GET requests exclusively to the legitimate `https://prim.iledefrance-mobilites.fr/marketplace/v2/navitia` endpoint. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, obfuscation, or prompt injection attempts in the `SKILL.md` that would subvert the agent's behavior beyond its stated purpose.

能力评估

✓ Purpose & Capability

Name/description match the included script and reference doc. The only credential referenced (IDFM_PRIM_API_KEY) is exactly what the PRIM/Navitia API requires, and the script calls the documented Navitia endpoints.

✓ Instruction Scope

SKILL.md only instructs setting IDFM_PRIM_API_KEY and running the bundled Python script to call /places, /journeys, and /disruptions. The script does not read unrelated files, other env vars, or send data to unexpected external endpoints (default base URL is the official PRIM domain).

✓ Install Mechanism

There is no install spec (instruction-only with a small bundled script). No downloads or archive extraction are performed; the script uses only the Python standard library.

✓ Credentials

Only one environment variable is required (IDFM_PRIM_API_KEY), which is necessary and proportionate for authenticating to the IDFM PRIM API. No unrelated secrets or config paths are requested.

✓ Persistence & Privilege

Skill does not request permanent presence (always: false) and does not modify other skills or system-wide settings. It runs on demand and relies on the environment-provided API key.

版本历史

v0.1.0

Publish under alternative slug to validate registry visibility

元数据

Slug idfm-journey-navitia

版本 0.1.0

许可证 —

累计安装 0

当前安装数 0

历史版本数 1

常见问题