mta
Provides real-time NYC MTA transit data, including subway arrivals, bus predictions, and service alerts for public transit inquiries.
Install this skill
or
75/100
Security score
The mta skill was audited on Mar 3, 2026 and we found 17 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 133
Access to hidden dotfiles in home directory
SourceSKILL.md
| 133 | On first use, run `node scripts/mta.mjs refresh-gtfs` to download subway stop/route data to `~/.mta/gtfs/`. Refresh periodically (data updates hourly). |
medium line 240
Access to hidden dotfiles in home directory
SourceSKILL.md
| 240 | - **Local storage only** — GTFS static data is cached locally at `~/.mta/gtfs/`; no data is written elsewhere |
low line 46
External URL reference
SourceSKILL.md
| 46 | | 1234567/GS | 1, 2, 3, 4, 5, 6, 7, Grand Central Shuttle | `https://api-endpoint.mta.info/Dataservice/mtagtfsfeeds/nyct/gtfs` | |
low line 47
External URL reference
SourceSKILL.md
| 47 | | ACE | A, C, E, Rockaway Shuttle, Franklin Shuttle | `https://api-endpoint.mta.info/Dataservice/mtagtfsfeeds/nyct/gtfs-ace` | |
low line 48
External URL reference
SourceSKILL.md
| 48 | | BDFM | B, D, F, M | `https://api-endpoint.mta.info/Dataservice/mtagtfsfeeds/nyct/gtfs-bdfm` | |
low line 49
External URL reference
SourceSKILL.md
| 49 | | G | G | `https://api-endpoint.mta.info/Dataservice/mtagtfsfeeds/nyct/gtfs-g` | |
low line 50
External URL reference
SourceSKILL.md
| 50 | | JZ | J, Z | `https://api-endpoint.mta.info/Dataservice/mtagtfsfeeds/nyct/gtfs-jz` | |
low line 51
External URL reference
SourceSKILL.md
| 51 | | L | L | `https://api-endpoint.mta.info/Dataservice/mtagtfsfeeds/nyct/gtfs-l` | |
low line 52
External URL reference
SourceSKILL.md
| 52 | | NQRW | N, Q, R, W | `https://api-endpoint.mta.info/Dataservice/mtagtfsfeeds/nyct/gtfs-nqrw` | |
low line 53
External URL reference
SourceSKILL.md
| 53 | | SIR | Staten Island Railway | `https://api-endpoint.mta.info/Dataservice/mtagtfsfeeds/nyct/gtfs-si` | |
low line 59
External URL reference
SourceSKILL.md
| 59 | Get a free key at: https://register.developer.obanyc.com/ |
low line 74
External URL reference
SourceSKILL.md
| 74 | | Subway Alerts | `https://api-endpoint.mta.info/Dataservice/mtagtfsfeeds/camsys/subway-alerts` | |
low line 75
External URL reference
SourceSKILL.md
| 75 | | Bus Alerts | `https://api-endpoint.mta.info/Dataservice/mtagtfsfeeds/camsys/bus-alerts` | |
low line 76
External URL reference
SourceSKILL.md
| 76 | | All Alerts | `https://api-endpoint.mta.info/Dataservice/mtagtfsfeeds/camsys/all-alerts` | |
low line 82
External URL reference
SourceSKILL.md
| 82 | | Subway | `http://web.mta.info/developers/data/nyct/subway/google_transit.zip` | |
low line 128
External URL reference
SourceSKILL.md
| 128 | 1. Get a free key at https://register.developer.obanyc.com/ |
low line 200
External URL reference
SourceSKILL.md
| 200 | - **Bus requires a free API key** — get one at https://register.developer.obanyc.com/ |
Scanned on Mar 3, 2026
View Security DashboardInstall this skill with one command
/learn @openclaw/mta