London public transport journey planner and disruptions

Plan TfL journeys from start/end/time, resolve locations (prefer postcodes), and warn about disruptions; suggest alternatives when disrupted.

This skill appears internally consistent: it calls only the official TfL API and optionally uses TFL_APP_ID/TFL_APP_KEY if you provide them. Before installing, consider: (1) only provide your TfL keys if you trust the skill source (the keys are used only to call api.tfl.gov.uk as seen in the code); (2) the agent will make outbound network calls when running the script, so verify network policies if that matters; (3) review the included Python script yourself (it's short and readable) if you have any doubt. No other unexpected permissions or data exfiltration patterns were found.

Type: OpenClaw Skill Name: transport-for-london-journey-disruption Version: 1.0.1 The OpenClaw skill bundle for TfL journey planning and disruption checks is benign. The `SKILL.md` provides clear instructions for the AI agent to interact with the TfL API, and the `scripts/tfl_journey_disruptions.py` script implements this functionality by making HTTP GET requests to `https://api.tfl.gov.uk`. It reads `TFL_APP_ID` and `TFL_APP_KEY` from environment variables for authentication, which is a standard practice for API clients. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, prompt injection attempts against the agent, or obfuscation. All actions are directly aligned with the stated purpose of the skill.