← 返回 Skills 市场
NYC MTA Transit
作者
Brian Leach
· GitHub ↗
· v1.0.0
510
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install mta
功能描述
NYC MTA transit — real-time subway arrivals, bus predictions, service alerts, and route info for the New York City subway and bus system. Use when the user a...
安全使用建议
This skill appears to do exactly what it says: read MTA GTFS-RT feeds for subway/alerts and call the MTA BusTime API when you provide MTA_BUS_API_KEY. Before installing, consider: 1) Inspect scripts/mta.mjs yourself (it is included) or run in a sandbox; the code will create ~/.mta/gtfs/ and may download GTFS static data over HTTP (potential MITM risk) — if that matters, run refresh-gtfs behind a network you trust. 2) Do not store unrelated secrets in the skill directory .env (the skill will source a .env there). 3) npm install will pull protobufjs from the public npm registry — if your org requires vetting of packages, review that dependency. If these points are acceptable, the skill is coherent and appropriate for use.
功能分析
Type: OpenClaw Skill
Name: mta
Version: 1.0.0
The OpenClaw MTA skill is classified as benign. The code (`scripts/mta.mjs`) correctly sanitizes all user inputs using `encodeURIComponent()` before incorporating them into API calls, preventing URL injection. File operations are confined to `~/.mta/gtfs/` for caching public GTFS data, and the `execFileSync` command for `unzip` uses a safe array-based argument list with controlled paths, mitigating shell injection risks. All network requests are directed to official MTA API endpoints (`api-endpoint.mta.info`, `bustime.mta.info`, `web.mta.info`). The `SKILL.md` and other documentation files contain no prompt injection attempts or instructions for the AI agent to perform unauthorized actions. The skill's stated purpose, security claims, and code implementation are consistent and demonstrate no malicious intent or significant vulnerabilities.
能力评估
Purpose & Capability
Name/description (MTA subway/bus/alerts) matches the files and runtime needs: Node runtime, protobuf decoding, GTFS real-time feeds, and an optional MTA bus API key for bus endpoints. The declared required binary (node) and required env var (MTA_BUS_API_KEY) are appropriate for the described features.
Instruction Scope
SKILL.md and scripts instruct the agent to fetch GTFS-RT feeds, call the BusTime SIRI API (when MTA_BUS_API_KEY is present), and maintain a local GTFS cache under ~/.mta/gtfs/. The skill also loads a .env file from the skill directory if present. These behaviors are expected, but worth noting: the GTFS static download uses an HTTP URL (the code documents this as intentional) and the script imports execFileSync — review how execFileSync is used (the project claims safe usage in CLAUDE.md).
Install Mechanism
The skill requires npm install to fetch protobufjs from the public npm registry (package.json/package-lock.json present). This is a standard dependency installation; there are no opaque remote binary downloads or URL shorteners. Note: the SKILL.md includes an npm install shell command; registry metadata indicated 'No install spec', which is a minor metadata inconsistency but not a security red flag by itself.
Credentials
Only one optional credential is requested: MTA_BUS_API_KEY, which is necessary solely for bus/SIRI functionality. No unrelated secrets or multiple unrelated credentials are requested. The script will also load a .env file from the skill directory if present — avoid placing unrelated secrets there.
Persistence & Privilege
The skill writes persistent data to ~/.mta/gtfs/ (local GTFS static cache) and reads that cache later; this is consistent with offline/static GTFS usage. always:false (not force-installed) and it doesn't request elevated or cross-skill configuration changes. If you prefer, run the skill in a sandbox or restrict file permissions for the created directory.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install mta - 安装完成后，直接呼叫该 Skill 的名称或使用
/mta触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
- Initial release of the mta skill providing real-time NYC MTA transit information.
- Supports subway arrivals, bus predictions (requires API key), service alerts, and route details for the New York City subway and bus system.
- Commands cover arrivals, vehicle locations, service alerts, route and stop lookup, and GTFS data refresh.
- Zero configuration needed for subway and alert features; bus-related features require an MTA_BUS_API_KEY.
- Includes reference data on subway lines, key bus routes, and fare information.
元数据
常见问题
NYC MTA Transit 是什么？
NYC MTA transit — real-time subway arrivals, bus predictions, service alerts, and route info for the New York City subway and bus system. Use when the user a... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 510 次。
如何安装 NYC MTA Transit？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install mta」即可一键安装，无需额外配置。
NYC MTA Transit 是免费的吗？
是的，NYC MTA Transit 完全免费（开源免费），可自由下载、安装和使用。
NYC MTA Transit 支持哪些平台？
NYC MTA Transit 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 NYC MTA Transit？
由 Brian Leach（@brianleach）开发并维护，当前版本 v1.0.0。
推荐 Skills