Parcel Tracking

• Analyzed: May 11, 2026, 4:37 AM
• Findings: 1
• Version: 1.0.2
• Hash: 7e2432836b998a7cb0c25f25654fe11cd1f3465e49be16e238a4909fa45cbaad
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill's purpose is to track parcels using the Track123 API. It correctly retrieves the `TRACK123_API_SECRET` from an environment variable and uses it in HTTP headers for API calls to `https://api.track123.com`. Input parameters are used as expected in the API request. The included vendored libraries (`pip`, `certifi`, `charset_normalizer`, `idna`) are standard dependencies for network operations in Python. There is no evidence of malicious intent, such as unauthorized data exfiltration, arbitrary command execution, or prompt injection attempts in `SKILL.md`.