sydney-commute
Pass
Audited by Gen Agent Trust Hub on Mar 16, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Communicates with official Transport for NSW (TfNSW) APIs (
api.transport.nsw.gov.au) to retrieve real-time transport data, trip plans, and stop information. - [EXTERNAL_DOWNLOADS]: Utilizes OpenStreetMap's Nominatim service (
nominatim.openstreetmap.org) for forward and reverse geocoding of locations to improve trip planning accuracy. - [EXTERNAL_DOWNLOADS]: Uses
ip-api.comas a fallback for city-level geolocation based on the user's IP address when more precise methods are unavailable. - [CREDENTIALS_UNSAFE]: Manages a user-provided TfNSW API key by storing it in a local configuration file (
~/.config/sydney-commute/credentials.json). The skill follows security best practices by setting restricted file permissions (chmod 600) as documented in the installation instructions. - [COMMAND_EXECUTION]: Executes a local Python script (
commute.py) viauv runto process transport queries and manage data aggregation. - [DATA_EXFILTRATION]: Transmits user-provided or detected location coordinates to trusted geocoding and transport services. This is the primary intended function of the skill and is required to provide relevant commute results.
Audit Metadata