← 返回 Skills 市场
Trimet
作者
Matt Russell
· GitHub ↗
· v0.1.0
1730
总下载
1
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install trimet
功能描述
Get Portland transit information including arrivals, trip planning, and alerts. Use when user asks about buses, MAX, trains, or transit in Portland.
安全使用建议
This skill appears to simply wrap the TriMet CLI and needs a TriMet developer API key (TRIMET_APP_ID). Before installing or supplying an API key: 1) confirm the 'trimet-cli' npm package is legitimate (check npmjs.org, maintainer, download counts, and source code). 2) Note the registry metadata omitted the required binary/env — ask the publisher or maintainers to correct that. 3) Only provide your TriMet API key (not other credentials); if you are uncomfortable, run the CLI locally yourself rather than giving the key to an agent. 4) If you plan to allow autonomous agent actions, be aware the agent will try to run the 'trimet' binary and may attempt global installs if not present — prefer manual install and review the installed package code first.
功能分析
Type: OpenClaw Skill
Name: trimet
Version: 0.1.0
The skill bundle is benign. It provides instructions for installing and using a CLI tool (`trimet-cli`) to access Portland transit information. All commands and setup steps are directly related to the stated purpose, requiring an API key and using the `trimet` binary. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, prompt injection attempts against the agent, or obfuscation within the provided `SKILL.md` and `_meta.json` files. The `npm install` instruction is a standard method for acquiring the necessary tool.
能力评估
Purpose & Capability
The SKILL.md describes a TriMet CLI wrapper (arrivals, trip planning, alerts). Requiring a 'trimet' CLI binary and a TRIMET_APP_ID API key is coherent with that purpose. However, the registry metadata included with the skill lists no required binaries or environment variables, which conflicts with the SKILL.md requirements.
Instruction Scope
Instructions are narrowly scoped to using the trimet CLI and an API key. They do not ask the agent to read unrelated files, other environment variables, or exfiltrate data to unexpected endpoints.
Install Mechanism
The skill is instruction-only (no install spec). SKILL.md tells users to 'npm install -g trimet-cli' — a reasonable, common install path but not enforced by the skill metadata. Because the skill relies on an external npm package, you should verify that 'trimet-cli' on npm is the expected, maintained package.
Credentials
The SKILL.md requires a single TRIMET_APP_ID env var (the TriMet API key), which is proportionate. The concern is that the skill's registry metadata did not declare this required env var; that mismatch could confuse automated permission checks or hide that a secret is needed.
Persistence & Privilege
The skill does not request persistent privileges, always:true is not set, and it is user-invocable only. There is no indication it modifies other skills or system-wide settings.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install trimet - 安装完成后，直接呼叫该 Skill 的名称或使用
/trimet触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.0
Initial release
元数据
常见问题
Trimet 是什么？
Get Portland transit information including arrivals, trip planning, and alerts. Use when user asks about buses, MAX, trains, or transit in Portland. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 1730 次。
如何安装 Trimet？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install trimet」即可一键安装，无需额外配置。
Trimet 是免费的吗？
是的，Trimet 完全免费（开源免费），可自由下载、安装和使用。
Trimet 支持哪些平台？
Trimet 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Trimet？
由 Matt Russell（@mjrussell）开发并维护，当前版本 v0.1.0。
推荐 Skills