TrainClaw

3-in-1 China 12306 query — tickets, route stops, transfer plans. Zero login. Filter 高铁/动车/火车 by type, time, duration. Pure Python, text/json/csv output. 火车票/...

TrainClaw appears coherent and implements exactly what it claims: CLI queries to 12306 with local caching. Before installing or enabling it for autonomous use, consider: 1) it will make network requests to kyfw.12306.cn and search.12306.cn (ensure your environment permits outbound HTTP and this is acceptable); 2) it writes a station cache under the skill's directory (cache/stations.json) — check file-write permissions and sandboxing if you are concerned about persistence; 3) the packaged files show minor version mismatches in README/ __version__ vs registry metadata — not a security issue but worth noting (origin is 'unknown' in registry metadata despite GitHub links in files); 4) verify you have Python 3.8+ and the requests library available; 5) if you require stricter isolation, run the script locally in a sandbox/container first to audit behavior and network traffic. Overall the bundle is internally consistent and not requesting unrelated secrets or contacting unexpected endpoints.

Type: OpenClaw Skill Name: trainclaw Version: 0.0.7 The TrainClaw skill bundle is a legitimate CLI tool for querying China Railway 12306 ticket information, route stops, and transfer plans. The code (trainclaw.py) and configuration (config.py) interact exclusively with official 12306 API endpoints (kyfw.12306.cn and search.12306.cn) using the requests library. It includes standard features like local caching for station data and request rate-limiting. No evidence of data exfiltration, unauthorized execution, or malicious prompt injection was found.