📦 12306 Backup — 查火车票
v1.0.0调用中国铁路12306官方接口，实时查询列车时刻表、余票数量及站点信息，支持高铁/火车班次、票价、座位余量等多维度检索，帮助用户快速规划出行。
0· 77·0 当前·0 累计
by 下载技能包
最后更新
2026/4/5
安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
Functionally and security-wise the skill is coherent with its purpose: it fetches data from official 12306 endpoints and caches station data locally, and it does not request secrets. Before installing, however, verify the skill's provenance (source/homepage is unknown here) and run it in a trusted/isolated environment if you don't trust the author. Also ensure you have Node.js >=18 (the code uses global fetch) and be aware the scripts will create/overwrite files under the skill's data directory ...详细分析 ▾
✓ 用途与能力
Name/description, SKILL.md, and the two JS scripts all focus on querying 12306, parsing results, and producing HTML/MD/JSON output. The only required binary is node, which is appropriate for the provided Node.js scripts.
✓ 指令范围
Runtime instructions only run the included scripts. The scripts fetch data from 12306 domains, parse and filter results, and write cache/output files under the skill's data path — all within the described scope. No unrelated files, system credentials, or external endpoints are accessed.
✓ 安装机制
This is an instruction-only skill with included scripts and no install spec. No downloads from third-party URLs or archive extraction are performed by the skill itself.
✓ 凭证需求
The skill requires no environment variables or credentials. It only needs Node.js runtime; no unexpected secret access is requested.
✓ 持久化与权限
always is false and the skill does not request permanent platform privileges. It caches station data and writes output files under its own data path only, which is expected behavior.
⚠ scripts/stations.mjs:3
File read combined with network send (possible exfiltration).
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/5
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install 12306-backup
镜像加速npx clawhub@latest install 12306-backup --registry https://cn.longxiaskill.com