trein
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
treincommand-line utility globally via npm and provides links to download pre-compiled binaries from a GitHub repository. - [COMMAND_EXECUTION]: The skill uses the
treinCLI to perform operations such as checking train departures, planning trips, and listing disruptions. - [CREDENTIALS_UNSAFE]: The skill manages authentication via the
NS_API_KEYenvironment variable or a local configuration file located at~/.config/trein/trein.config.json. These are standard practices for CLI authentication and do not involve hardcoded secrets. - [DATA_EXFILTRATION]: No evidence of unauthorized data access or exfiltration was found. The skill interacts solely with the Dutch Railways API via the specified tool.
Audit Metadata