Tabussen

Västerbotten & Umeå public transport trip planner (Tabussen/Ultra). Plans bus journeys using ResRobot API. Supports stops, addresses, coordinates, regional and local routes throughout Västerbotten county.

This skill's code looks like a straightforward ResRobot (Trafiklab) trip planner implemented as two shell scripts and requires curl and jq. Before installing: (1) Note that the scripts require RESROBOT_API_KEY — the registry metadata omitted this; verify where you'll supply that key and make sure the manifest is corrected. (2) Confirm the skill's origin (owner slug present but no homepage/source URL) — unknown source increases risk. (3) Limit the API key permissions if possible and avoid sharing broader credentials. (4) Review the included scripts yourself (they are short shell scripts) or run them in an isolated environment to verify behavior. (5) If you expect the platform to manage credentials, ask the publisher to declare RESROBOT_API_KEY as a required env var/primary credential so permission checks are accurate.

Type: OpenClaw Skill Name: tabussen Version: 1.0.0 The skill bundle is benign. It provides a public transport trip planner using the ResRobot API. The shell scripts (`journey.sh`, `search-location.sh`) securely handle API keys via environment variables and properly URL-encode user input (`jq -sRr @uri` in `search-location.sh`) before making `curl` requests, preventing command injection. The `SKILL.md` instructions for the AI agent are detailed and focused on correct tool usage and user interaction, showing no signs of prompt injection attempts to subvert the agent's behavior or exfiltrate data.