Security audit
Logistics
Security checks across malware telemetry and agentic risk
Overview
This package-tracking skill needs review because its visible implementation returns mock tracking updates as if they were real and stores tracking numbers locally without clear disclosure.
Treat this skill as review-required before use. Do not rely on its tracking statuses unless the maintainer adds a real, disclosed courier data source. If you use or run the code, assume tracking numbers may be saved under ~/.openclaw/data/logistics and review or delete that data as needed.
VirusTotal
65/65 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.