스킬 youbike-realtime
📦
youbike-realtime
콘텐츠 리비전 r1 안전 ⚙️ 외부 명령어🌐 네트워크 접근📁 파일 시스템 접근
Find Available YouBike Bicycles and Return Spaces
Finding a bicycle or an empty return space requires current station information. This skill guides public-feed queries for YouBike availability across Taiwan.
지원: Claude Codex Code(CC)
내 에이전트로 설치
이 요청을 에이전트에 복사하세요. 공식 Skill 페이지와 매니페스트가 포함되어 있습니다.
에이전트 요청
Review the Skillstore skill "youbike-realtime" from https://skillstore.io/skills/tahodev-youbike-realtime.md and its manifest at https://skillstore.io/api/skills/tahodev-youbike-realtime/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.에이전트는 계속해서 계획을 표시하고 보안 정책에서 요구하는 확인을 요청해야 합니다.
에이전트가 읽기 쉬운 리소스
AI 에이전트, 크롤러, 스크립트가 전체 페이지 대신 정리된 컨텍스트만 필요할 때 이 링크를 사용하세요.
테스트해 보기
"youbike-realtime" 사용 중입니다. Show an example station availability response.
예상 결과:
- Illustrative response only, not live station data.
- Example Station A: 8 bicycles available, including 2 electric bicycles; 12 return spaces.
- Status: operating. Source: unified YouBike feed.
- Data updated: 2026-09-26 09:30:00 Taiwan time, UTC+8.
"youbike-realtime" 사용 중입니다. What would you report if both Taipei data sources failed?
예상 결과:
- Illustrative failure response: current Taipei station availability could not be confirmed.
- The unified and municipal feeds did not provide usable data.
- Check the official YouBike app or website before departure. Older data is not being presented as live.
보안 감사
안전v1 • 2026. 10. 13. 버전별 보고서 열기
Reviewed all 114 static findings: 109 are false positives from Markdown formatting, public-data URLs, read-only queries, and readable multilingual text. Five downloads use predictable shared temporary paths, allowing local symlink overwrite or cache tampering when another user controls those paths. No evidence found of prompt injection, credential access, or data exfiltration.
1
스캔된 파일
239
분석된 줄 수
5
검토 항목
0
오탐 무시됨
기능 검토 항목 (5)
이 스킬에 대해 예상될 수 있는 실제 로컬 기능이므로 검토가 필요하지만, 확인된 악의적 동작으로는 집계되지 않습니다.
중간
Temp directory access
curl -sm 60 https://apis.youbike.com.tw/json/station-yb2.json -o /tmp/youbike_all.json
Curl writes to predictable /tmp/youbike_all.json without creating a private directory. A local attacker can precreate a writable symlink target or tamper with shared cache data.
중간
Temp directory access
curl -sm 30 https://tcgbusfs.blob.core.windows.net/dotapp/youbike/v2/youbike_immediate.json -o /tmp/
Curl writes to predictable /tmp/youbike.json without establishing private ownership. A local attacker can redirect a writable download through a symlink or alter shared cache contents.
중간
Temp directory access
curl -sm 30 'https://data.ntpc.gov.tw/api/datasets/010E5B15-3823-4B20-B401-B1CF000550C5/json?page=0&
Curl downloads into predictable /tmp/youbike_ntpc.json without a private directory. Preexisting attacker-controlled symlinks can redirect writable output, and shared files permit cache tampering.
중간
Temp directory access
curl -sm 30 'https://newdatacenter.taichung.gov.tw/api/v1/no-auth/resource.download?rid=9468c0d0-e1e
Curl writes directly to predictable /tmp/youbike_tc.json. Without private ownership, another local user can precreate a writable symlink target or supply tampered cache data.
중간
Temp directory access
curl -sm 30 'https://opendata.tycg.gov.tw/api/v1/dataset.api_access?rid=08274d61-edbe-419d-8fcc-7a64
Curl writes directly to predictable /tmp/youbike_ty.json without isolating the cache. Local attackers can exploit preexisting writable symlinks or alter shared station data.
위험 요인
⚙️ 외부 명령어 (50)
SKILL.md:14 SKILL.md:25-27 SKILL.md:27-29 SKILL.md:29-31 SKILL.md:31-37 SKILL.md:37 SKILL.md:38 SKILL.md:39-40 SKILL.md:40 SKILL.md:41 SKILL.md:42 SKILL.md:43-44 SKILL.md:44-45 SKILL.md:45 SKILL.md:46-47 SKILL.md:47 SKILL.md:48 SKILL.md:54 SKILL.md:55 SKILL.md:56 SKILL.md:57 SKILL.md:58 SKILL.md:59 SKILL.md:60 SKILL.md:64-84 SKILL.md:84-90 SKILL.md:90-93 SKILL.md:93-99 SKILL.md:99 SKILL.md:100 SKILL.md:104-106 SKILL.md:106-108 SKILL.md:108-112 SKILL.md:112-113 SKILL.md:113 SKILL.md:114 SKILL.md:115 SKILL.md:116-117 SKILL.md:117-118 SKILL.md:118-119 SKILL.md:119 SKILL.md:120 SKILL.md:121 SKILL.md:123-127 SKILL.md:127-131 SKILL.md:131-133 SKILL.md:133-135 SKILL.md:135 SKILL.md:141 SKILL.md:142
🌐 네트워크 접근 (6)
감사자: codex
이 보고서 공유 및 인용
버전이 지정된 평가 보고서, 중립 배지, 임베드 카드 및 인용을 공유하세요. Skillstore는 근거를 보고하지만 이 Skill의 안전 여부를 판단하지 않습니다.
보고서 링크 복사
https://skillstore.io/skills/tahodev-youbike-realtime/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 배지
[](https://skillstore.io/skills/tahodev-youbike-realtime?utm_source=security_passport_badge)HTML 배지
<a href="https://skillstore.io/skills/tahodev-youbike-realtime?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/tahodev-youbike-realtime/security.svg" alt="Skillstore security assessment" loading="lazy"></a>임베드 카드
<iframe src="https://skillstore.io/embed/skills/tahodev-youbike-realtime.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>학술 인용 (APA · BibTeX · CFF)
APA 인용
tahodev. (2026). youbike-realtime security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/tahodev-youbike-realtime/audits/1BibTeX 인용
@techreport{tahodev-tahodev-youbike-realtime-2026,
author = {tahodev},
title = {youbike-realtime security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/tahodev-youbike-realtime/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "youbike-realtime security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "tahodev"
date-released: "2026-10-13"
url: "https://skillstore.io/skills/tahodev-youbike-realtime/audits/1"
identifiers:
- type: other
value: "skillstore:tahodev-youbike-realtime:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore 점수
이 점수의 이유 증거 신뢰도: 중간 55
아키텍처
85
유지보수성
87
콘텐츠
65
커뮤니티
83
사양 준수
만들 수 있는 것
Check Bicycles Before Commuting
Find operating stations near a district or landmark, compare bicycle counts, and confirm the data update time.
Locate Electric Bicycles While Traveling
Find stations with electric bicycles in a supported service area and review available return spaces.
Compare Cross-City Station Availability
Normalize Taipei and New Taipei feeds, compare station availability, and identify source failures or incomplete responses.
이 프롬프트를 사용해 보세요
Check a District
Find operating YouBike stations in Taipei Daan District with bicycles available. Include return spaces and each source update time.
Find Electric Bicycles
Find operating stations with electric bicycles in New Taipei Banqiao District. Show electric counts, return spaces, source, and update time.
Rank Nearby Stations
Find five operating stations with bicycles nearest to latitude 25.033 and longitude 121.565. Include addresses and timestamps; label proximity ranking as approximate.
Compare Fallback Feeds
Compare Taipei and New Taipei stations using municipal fallback feeds. Normalize fields, check pagination and freshness, and report failures without presenting stale data as live.
모범 사례
- Include the source update time in Taiwan local time and recheck availability before departure.
- Reuse a fresh response for one or two minutes and use private temporary storage for downloads.
- Validate response format, source-specific fields, operating status, and pagination before reporting availability.
피하기
- Presenting stale, empty, or invalid feed responses as current station availability.
- Applying one city's field names or electric-bicycle parsing rules to every source.
- Polling continuously or treating approximate coordinate ranking as a walking route.
자주 묻는 질문
Do I need an API key or account?
The documented queries use public feeds without API keys or login. Your environment needs network access, curl, and jq.
Which areas are covered?
The unified feed covers 14 documented service areas, including Taipei, New Taipei, Taoyuan, Taichung, Tainan, and Kaohsiung. Coverage can change.
Can I find electric bicycles?
Yes, the unified feed includes electric-bicycle counts. Municipal formats differ, and the Taipei municipal feed does not provide those counts.
Can it reserve a bicycle or calculate fees?
No. The skill supports station availability lookups, not reservations, rentals, payments, or fee calculations.
What happens when the unified feed is unavailable?
Use municipal feeds for Taipei, New Taipei, Taichung, or Taoyuan. For other areas, report the failure and recommend official confirmation.
Are nearby stations ranked by walking distance?
No. The example uses squared coordinate differences for approximate proximity. It does not calculate walking routes or travel times.