Is manmal/a-nach-b safe?
Yes. manmal/a-nach-b is safe to install. Oathe's behavioral security audit gave the a-nach-b skill by manmal a trust score of 92/100 with 2 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/manmal/a-nach-b
Is manmal/a-nach-b safe to install?
This skill is a legitimate Austrian public transport API wrapper that provides real-time departures, route planning, and service disruption information. The shell scripts are well-documented and make safe HTTP requests to the official HAFAS transport API with proper input validation.
What security issues were found in manmal/a-nach-b?
Category Scores
Findings (2)
LOW Canary file access during installation -10 ▶
System monitoring detected access to honeypot files (.env, SSH keys, AWS credentials) during skill installation. However, this appears to be from SSH session system processes rather than the skill itself, and no files were modified or exfiltrated.
LOW Executable shell scripts present -15 ▶
The skill contains multiple executable bash scripts (search.sh, departures.sh, route.sh, disruptions.sh) that make HTTP requests to external APIs. These scripts appear legitimate and properly validate input parameters, making safe curl requests to the Austrian public transport HAFAS API.
Should I install manmal/a-nach-b?
Oathe's verdict for manmal/a-nach-b is SAFE with a trust score of 92/100. Recommendation: Install.