Taxi

Handle everything for ground transportation, from price comparison to booking, tracking, disputes, and expense management.

This skill appears to do what it says: compare rides, help with bookings, track trips, and manage disputes. It asks for no external credentials or installs, but it does create and use files under ~/taxi/ that can contain personal data (saved addresses, emails, trip receipts, referral codes). Before enabling: (1) inspect ~/taxi/ contents and set strict file permissions (chmod 700 or equivalent); (2) avoid putting full payment credentials or unencrypted tokens in the memory files; (3) confirm you are comfortable with the agent performing browser interactions on ride websites; and (4) if you want stronger protection, keep sensitive account credentials out of the skill's local memory and handle final payment/verification steps yourself.

Type: OpenClaw Skill Name: taxi Version: 1.0.0 The skill bundle is primarily documentation and instructions for an AI agent to manage taxi services. All instructions in SKILL.md and other markdown files are aligned with the stated purpose and do not contain malicious prompt injection attempts. However, the `memory-template.md` file includes a direct shell command instruction (`mkdir -p ~/taxi`). While this specific command is benign and necessary for the skill's setup, it demonstrates the agent's capability to execute shell commands from markdown. This represents a significant vulnerability risk (e.g., shell injection) if the agent's runtime environment does not adequately sandbox or sanitize commands, even though no malicious intent is present in this specific instance.