The Agent Skills Directory

[SAFE]: The skill instructions and referenced Standard Operating Procedures (SOPs) focus entirely on automating train ticket queries via the official 12306.cn and kyfw.12306.cn domains. No suspicious external domains or exfiltration patterns were identified.
[COMMAND_EXECUTION]: The skill utilizes standard browser actions such as navigate, type, press, and click to interact with the web interface. These actions are restricted to the browser environment and do not involve unauthorized shell command execution or system-level changes.
[INDIRECT_PROMPT_INJECTION]: The skill ingests external HTML data from the 12306 website using the readability action to extract ticket information. While this presents an attack surface common to all web-parsing skills, the interaction is localized to a well-known service required for the skill's primary function. There are no indications of malicious manipulation of this data stream.
[SAFE]: No obfuscation techniques, hidden payloads, or persistence mechanisms were detected in the skill's markdown or reference files. The documentation is transparent and aligns with the stated functionality.
[CREDENTIALS_SAFE]: The skill does not request, store, or transmit user credentials. It operates as a public query tool for train schedules and availability.

12306-train-query