← 返回 Skills 市场
lore2601

tper-hellobus

作者 rolench · GitHub ↗ · v0.0.2
cross-platform ⚠ suspicious
397
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install tper-hellobus-skill
功能描述
Get real-time and scheduled bus arrival times for TPER buses in Bologna and Ferrara, Italy. Use this skill whenever the user mentions TPER, bus stop codes (n...
安全使用建议
This skill is coherent and only needs network access to the public TPER Hellobus API (hellobuswsweb.tper.it). Before enabling: ensure you are comfortable allowing outbound requests to that domain, add it to your agent's domain whitelist, and be aware queries (stop code, line, time) will be sent to the external API. No credentials are required. Consider rate limits or occasional API downtime; test with the provided sample stop/line values first. If you need stricter privacy controls, avoid enabling network access or confirm your environment's logging/policy for outbound requests.
功能分析
Type: OpenClaw Skill Name: tper-hellobus-skill Version: 0.0.2 The skill is classified as suspicious due to a potential shell injection vulnerability. The `SKILL.md` instructs the AI agent to use `bash_tool` with `curl` to construct API calls, interpolating user-provided inputs (`stop_code`, `line_number`, `time_hhmm`) directly into the command string. Without explicit instructions for robust input sanitization or URL/shell escaping, a malicious user could craft inputs to execute arbitrary commands on the agent's host system. While the stated purpose is benign (querying a bus API), the method of execution introduces a significant security risk.
能力评估
Purpose & Capability
Name/description (TPER bus times for Bologna/Ferrara) match the runtime instructions which call the public Hellobus API. No unexplained credentials, binaries, or unrelated services are requested.
Instruction Scope
SKILL.md confines actions to parsing user input, converting times, and calling the documented API via curl, then formatting the response. It does not instruct reading local files, accessing unrelated environment variables, or sending data to endpoints other than the documented TPER API.
Install Mechanism
Instruction-only skill with no install spec and no code files — nothing is written to disk or fetched during install. This is the lowest-risk model and is appropriate for the described functionality.
Credentials
No environment variables, credentials, or config paths are required. The documented need for network access to hellobuswsweb.tper.it is proportionate to the skill's purpose.
Persistence & Privilege
The skill is not force-installed (always: false) and does not ask to modify other skills or system settings. Autonomous invocation is allowed (platform default) and is reasonable for a query-style skill.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install tper-hellobus-skill
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /tper-hellobus-skill 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.0.2
- Initial release of tper-hellobus-skill. - Provides real-time and scheduled TPER bus arrival times for Bologna and Ferrara via the official Hellobus API. - Supports parsing user queries for stop codes, line numbers, and optional times, with flexible natural language time input. - Distinguishes between real-time tracking and scheduled arrivals based on provided time. - Handles API error responses clearly for user debugging. - Formats bus arrival information as easy-to-read bullet lists.
元数据
Slug tper-hellobus-skill
版本 0.0.2
许可证
累计安装 0
当前安装数 0
历史版本数 1
常见问题

tper-hellobus 是什么?

Get real-time and scheduled bus arrival times for TPER buses in Bologna and Ferrara, Italy. Use this skill whenever the user mentions TPER, bus stop codes (n... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 397 次。

如何安装 tper-hellobus?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install tper-hellobus-skill」即可一键安装,无需额外配置。

tper-hellobus 是免费的吗?

是的,tper-hellobus 完全免费(开源免费),可自由下载、安装和使用。

tper-hellobus 支持哪些平台?

tper-hellobus 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 tper-hellobus?

由 rolench(@lore2601)开发并维护,当前版本 v0.0.2。

💬 留言讨论