thsr-timetable
Pass
Audited by Gen Agent Trust Hub on Jul 7, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a Python CLI script (
scripts/thsr.py) designed for end-user execution to query timetables. Analysis confirms it only performs expected network operations and data rendering without executing arbitrary shell commands or untrusted scripts. - [EXTERNAL_DOWNLOADS]: The skill communicates with a remote API endpoint at
superiorapis-creator.cteam.com.twto fetch timetable data. This is the primary function of the skill and uses the platform's standard HTTP libraries (urllib.request). - [CREDENTIALS_UNSAFE]: The skill follows security best practices by instructing users to store their API tokens in a
.envfile which is explicitly excluded from version control via.gitignore. No hardcoded secrets or sensitive developer credentials were found in the source code.
Audit Metadata