by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill is coherent with its stated purpose, but it requires installing and executing a third‑party CLI. If you plan to install: (1) review the GitHub repo (https://github.com/dedene/irail-cli) to confirm the source code and that you trust the author; (2) prefer building from source (go install) if you want to avoid adding a third‑party Homebrew tap; (3) be aware the agent will need permission to run the irail binary and network access to call the public iRail API; and (4) if you need stronge...详细分析 ▾
✓ 用途与能力
Name/description (Belgian railway queries) match the declared requirements: the skill needs the irail CLI and optionally jq. No unrelated credentials, files, or services are requested.
✓ 指令范围
SKILL.md only instructs running the irail CLI and (optionally) jq, and to prefer --json for machine parsing. It does not ask the agent to read unrelated files, exfiltrate data, or access unrelated environment variables.
ℹ 安装机制
Install options are a third‑party Homebrew tap (dedene/tap) or a Go package from GitHub (github.com/dedene/irail-cli). Both are reasonable for a CLI but involve pulling code from external sources; the brew tap is not an official core formula so verify the tap/author if you require higher assurance.
✓ 凭证需求
The skill declares no required credentials. SKILL.md documents optional environment variables (IRAIL_LANG, IRAIL_JSON, NO_COLOR) that are appropriate for a CLI tool and proportional to its functionality.
✓ 持久化与权限
The skill does not request always:true and is user-invocable only. It does not modify other skills or system-wide settings in its instructions.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.12026/2/13
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install irail
镜像加速npx clawhub@latest install irail --registry https://cn.longxiaskill.com