← Back to Skills Marketplace
Arrivelah
by
Abhay Bhat
· GitHub ↗
· v1.0.0
440
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install arrivelah
Description
One-word trigger for next bus arrival to your destination
README (SKILL.md)
ArriveLah - Singapore Bus Arrivals
Get your next bus arrival with a single word.
Usage
bus
Returns: Next bus to your saved destination with arrival time.
Configuration
Edit config.json to set:
defaultStop: Your usual bus stop code (e.g., "10051")defaultService: Your usual bus number (e.g., "120")destination: Where you're usually going (for display)
API
Uses the free Arrivelah2 API (https://arrivelah2.busrouter.sg/) No API key required.
Example Output
🚌 Bus 120 → Home
⏰ Next: 2 min (Seats available)
📍 From: Blk 149 Jalan Bukit Merah
Usage Guidance
This skill is small and coherent: it reads the provided config.json and issues an HTTPS request to the Arrivelah2 API. Before installing, verify you are comfortable with outbound HTTP requests to the apiUrl in config.json (default: https://arrivelah2.busrouter.sg). Ensure curl and jq are available. If you change apiUrl, only point it to trusted endpoints since the script will send your configured stop ID there. No credentials are requested and no other files or system credentials are accessed.
Capability Analysis
Type: OpenClaw Skill
Name: arrivelah
Version: 1.0.0
The `bus-arrival.sh` script is vulnerable to shell injection. It constructs a `curl` command using values (`API_URL` and `STOP`) directly read from `config.json` without proper sanitization. Since `SKILL.md` explicitly instructs users to edit `config.json`, a malicious user could inject arbitrary shell commands into fields like `defaultStop` or `apiUrl` within `config.json`, leading to remote code execution when the script is executed by the OpenClaw agent.
Capability Assessment
Purpose & Capability
Name/description (one-word trigger for next bus arrival) align with the shipped files: a short bash script and a config.json containing stop/service and apiUrl. Required binaries (curl, jq) are appropriate and expected.
Instruction Scope
SKILL.md confines behavior to reading config.json and calling the Arrivelah2 API. The runtime script only reads its own config file and prints parsed results; it does not reference other system files, credentials, or unexpected endpoints.
Install Mechanism
There is no install spec (instruction-only plus included script), so nothing arbitrary is downloaded or installed. Risk is low because the script is small, readable, and included in the package.
Credentials
The skill requests no environment variables or credentials. It only reads a local config.json. There are no unexplained secrets or cross-service tokens.
Persistence & Privilege
The skill is not always-enabled and does not modify other skills or system settings. It has no persistent background components or privilege-escalating behaviors.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install arrivelah - After installation, invoke the skill by name or use
/arrivelah - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of ArriveLah skill.
- Instantly get next bus arrival times for your saved destination in Singapore.
- One-word trigger: just type "bus" for updates.
- Easy setup—configure your usual stop and bus in `config.json`.
- Uses the free Arrivelah2 API; no API key required.
- Simple, clear output with route, timing, and seat info.
Metadata
Frequently Asked Questions
What is Arrivelah?
One-word trigger for next bus arrival to your destination. It is an AI Agent Skill for Claude Code / OpenClaw, with 440 downloads so far.
How do I install Arrivelah?
Run "/install arrivelah" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Arrivelah free?
Yes, Arrivelah is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Arrivelah support?
Arrivelah is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Arrivelah?
It is built and maintained by Abhay Bhat (@abhayjb); the current version is v1.0.0.
More Skills