Trein extended

Query Dutch Railways (NS) for TRAIN travel only - train departures, time-based trip planning (depart-at/arrive-by), disruptions, and station search via the trein CLI. NOT for car, bus, or other transport.

This skill appears to do what it says: it runs the trein CLI and uses an NS_API_KEY to query the Dutch Railways API. Before installing: (1) verify the npm package name and the GitHub repository (ensure they match and look legitimate); (2) prefer installing a specific release (or verify checksums) rather than blindly using 'latest' downloads; (3) be cautious when running npm -g installs (they alter your system PATH); (4) keep your NS_API_KEY secret, store it in the config file or environment as documented, and rotate it if you suspect misuse; and (5) if you do not want the agent to call the skill autonomously, disable autonomous invocation in your agent settings. If you want higher assurance, inspect the upstream repository or package contents before installing.

Type: OpenClaw Skill Name: trein-plus Version: 1.0.0 The OpenClaw AgentSkills skill bundle for 'trein-plus' is classified as benign. The installation methods specified in SKILL.md are standard (npm or direct download from the official GitHub releases of the `trein` project). The instructions for the AI agent in SKILL.md are focused on the correct and safe usage of the `trein` CLI tool, including best practices like verifying user intent and using structured JSON output. There is no evidence of prompt injection attempts to subvert the agent, data exfiltration, malicious execution, or other harmful behaviors. The requirement for an `NS_API_KEY` is for the skill's legitimate functionality and not for exfiltration.