← 返回 Skills 市场
443
总下载
0
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install openclaw-commute-traffic
功能描述
Check real-time traffic conditions for a route between two locations using TomTom. Use when the user asks about traffic, commute time, best time to leave, dr...
安全使用建议
This skill appears to do exactly what it claims: it sends user-supplied origin/destination strings to TomTom and returns route and traffic data. Before installing: (1) decide where the TomTom API key will be stored and who can read that Kubernetes secret (limit access); (2) be aware that addresses and coordinates provided by users are transmitted to TomTom — avoid using the skill to look up sensitive or private locations without explicit consent; (3) note the geocoding bias to Switzerland (countrySet=CH) — if you expect global use, update the script or queries; (4) the free tier has rate limits (~830 checks/day), so monitor quota usage.
功能分析
Type: OpenClaw Skill
Name: openclaw-commute-traffic
Version: 0.1.0
The skill bundle is classified as suspicious due to a potential shell injection vulnerability in the `SKILL.md` instructions. The AI agent is instructed to execute a `python3` command with user-provided origin and destination, enclosed in double quotes. If the agent fails to properly sanitize or escape user input containing special characters (e.g., an embedded double quote or command separator), it could lead to arbitrary command execution on the host system. While the `scripts/check_traffic.py` code itself correctly uses `urllib.parse.quote` for URL parameters, the initial command construction by the agent remains a critical vulnerability point, not malicious intent within the skill's code.
能力评估
Purpose & Capability
Name/description, required binary (python3), required env (TOMTOM_API_KEY), SKILL.md, INSTALL.md, and the included script all consistently implement TomTom geocoding and routing. The script uses only the TomTom API and standard library; the TOMTOM_API_KEY is the expected credential. Note: the code biases geocoding to Switzerland (countrySet=CH), which is coherent with examples but may surprise users outside CH.
Instruction Scope
SKILL.md limits runtime actions to extracting origin/destination from conversational context and running the included script; the script only performs API calls to TomTom and outputs structured JSON. One behavioral note: SKILL.md suggests using a user's 'known' home/office/regular commute if available — this can surface personal location data and should only be done with user consent. Otherwise the instructions stay within the declared purpose.
Install Mechanism
No install spec (instruction-only) and the provided INSTALL.md only instructs copying files and setting an env var/secret in Kubernetes. There are no downloads or third‑party package installs; the script relies on Python stdlib.
Credentials
Only TOMTOM_API_KEY is required and is the primary credential declared. The install instructions use a Kubernetes secret to expose this key — expected for an API-based skill. No other secrets, tokens, or config paths are requested.
Persistence & Privilege
always is false and the skill does not request persistent/global privileges or modify other skills. Autonomous invocation is allowed (platform default) but not combined with extra privileges or broad credential access.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install openclaw-commute-traffic - 安装完成后，直接呼叫该 Skill 的名称或使用
/openclaw-commute-traffic触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.0
**Major update for commute-traffic: now smarter at understanding user queries and delivers clear, real-time TomTom traffic info.**
- Determines origin and destination dynamically from the user's conversation, with guidance on resolving missing details.
- Accepts any address, city, landmark, or coordinate as input; no rigid format required.
- Presents practical commute advice, including current travel time, delay, alternative routes, and clear recommendations.
- Provides robust error-handling for missing API keys, vague locations, and route issues.
- Updated to version 2.0.0 with improved conversational context support and user-oriented results.
元数据
常见问题
Commute Traffic 是什么？
Check real-time traffic conditions for a route between two locations using TomTom. Use when the user asks about traffic, commute time, best time to leave, dr... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 443 次。
如何安装 Commute Traffic？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install openclaw-commute-traffic」即可一键安装，无需额外配置。
Commute Traffic 是免费的吗？
是的，Commute Traffic 完全免费（开源免费），可自由下载、安装和使用。
Commute Traffic 支持哪些平台？
Commute Traffic 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Commute Traffic？
由 Xavjer（@xavjer）开发并维护，当前版本 v0.1.0。
推荐 Skills