← 返回 Skills 市场
Translink CLI
作者
alanburchill
· GitHub ↗
· v1.0.1
604
总下载
2
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install translink-cli
功能描述
Query, troubleshoot, and explain Translink SEQ GTFS static + realtime data using local translink_* commands or plugin slash commands. Use for schedule lookup...
安全使用建议
This skill is instruction-only and appears to be a thin adapter that calls local translink_* CLI scripts. Before installing or using it: 1) Confirm you actually have the translink_* CLI installed from a trusted source — SKILL.md requires those binaries but the registry metadata did not declare them. 2) Verify the referenced GitHub repo URL (SKILL.md contains a likely typo) and inspect the CLI scripts for any network calls or unexpected behavior before putting them on PATH. 3) Because the skill relies on a local cache path (~/.openclaw/cache/translink/), check file permissions and where that cache will be stored. 4) If you cannot inspect the CLI code, run it in an isolated environment (container or VM) first. The skill itself does not request secrets or try to auto-install code, so risk is low if you confirm the CLI source; the main issue is the packaging/documentation inconsistency which could hide an untrusted dependency.
功能分析
Type: OpenClaw Skill
Name: translink-cli
Version: 1.0.1
The skill bundle is designed to interact with a local CLI tool (`translink_*` commands). It is classified as suspicious due to two main reasons: 1) The `SKILL.md` references a GitHub repository URL (`https://github.com/alanburchill/traslink-cli-scripts`) with a typo (`traslink` instead of `translink`), which represents a typosquatting supply chain risk. While the agent is instructed to 'stop and ask the user to install it first', this is still a significant vulnerability if the user or agent misinterprets the instruction. 2) The skill describes CLI commands with numerous parameters (e.g., `--where field=value`, `--contains field=text`) in `references/commands.md` and `SKILL.md`. If the AI agent constructs these commands by directly interpolating user input without proper sanitization, it could lead to shell injection vulnerabilities, allowing arbitrary command execution on the host system. These are vulnerabilities rather than explicit malicious intent within the skill bundle itself.
能力评估
Purpose & Capability
The skill's name/description match the runtime instructions: it expects local translink_* CLI commands and exposes schedule/realtime GTFS workflows. However, the registry metadata lists no required binaries while SKILL.md explicitly requires the translink_* CLI scripts in PATH (an un-declared prerequisite). That mismatch is a packaging/information inconsistency the user should confirm.
Instruction Scope
SKILL.md confines behavior to running local translink_* commands, reading local generated schema/docs, and using a local cache (~/.openclaw/cache/translink/). It instructs the agent to stop and ask the user if the CLI is not installed. There are no instructions to read unrelated system files, access external endpoints, or exfiltrate data.
Install Mechanism
There is no install spec (instruction-only), so nothing will be written to disk by the skill itself. The SKILL.md references a GitHub repo for the CLI, but the URL has an apparent typo ('traslink' vs. 'translink') — the skill does not attempt to download or install that code autonomously.
Credentials
The skill declares no required environment variables or credentials and does not request secrets. It does reference a local cache path (~/.openclaw/cache/translink/), which is consistent with its stated purpose and not a privileged credential access.
Persistence & Privilege
The skill is not always-enabled and does not request elevated platform privileges or modifications to other skills. Model invocation is allowed (platform default) but this is expected for a user-invocable skill that runs CLI commands.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install translink-cli - 安装完成后,直接呼叫该 Skill 的名称或使用
/translink-cli触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.1
translink-cli 1.0.1
- No file changes detected in this release.
- No updates or modifications to functionality or documentation.
v1.0.0
translink-cli 1.0.0
- Initial release of the Translink CLI skill.
- Allows querying, troubleshooting, and schema exploration for Translink SEQ GTFS static and realtime data.
- Supports both local translink_* shell commands and plugin slash commands.
- Provides flexible filtering, pagination, scheduling, and schema introspection options.
- Requires the Translink CLI scripts to be pre-installed in PATH.
元数据
常见问题
Translink CLI 是什么?
Query, troubleshoot, and explain Translink SEQ GTFS static + realtime data using local translink_* commands or plugin slash commands. Use for schedule lookup... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 604 次。
如何安装 Translink CLI?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install translink-cli」即可一键安装,无需额外配置。
Translink CLI 是免费的吗?
是的,Translink CLI 完全免费(开源免费),可自由下载、安装和使用。
Translink CLI 支持哪些平台?
Translink CLI 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Translink CLI?
由 alanburchill(@alanburchill)开发并维护,当前版本 v1.0.1。
推荐 Skills