中文快递查询
PassAudited by ClawScan on May 6, 2026.
Overview
This looks like a straightforward courier-tracking skill, but it references missing helper files and may send package details or phone-number digits to a third-party tracking service.
Before installing, understand that this skill is meant to query package status and may require a tracking number and, for some SF Express shipments, the last four digits of a phone number. Also verify that any referenced helper script actually comes with the skill and is reviewed before allowing the agent to run it.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The skill may not work as installed, or a user/agent may be tempted to obtain or run an unreviewed helper script.
The skill depends on helper files that are referenced in the instructions but not included in the supplied file manifest, leaving the actual implementation unavailable for review.
python3 scripts/track.py --num <快递单号> ... 完整代码表见 `references/courier-codes.md`
Only run a helper script if it is present in the installed skill directory and has been reviewed; the publisher should include the referenced files or update the instructions.
Providing phone-number digits plus a tracking number may reveal private shipping information.
Some lookups may request the last four digits of a sender or recipient phone number, which can function as verification data for accessing shipment details.
顺丰单号部分需要寄件人或收件人手机号后四位（单独询问用户）
Provide only the minimum details needed for the lookup, and avoid sharing full phone numbers or unrelated personal information.
A third-party tracking service may receive the shipment number and associated query details.
The skill discloses that package-tracking queries use an external provider, so tracking numbers and related lookup data may be sent to Kuaidi100.
数据来源：快递100（kuaidi100.com）免费查询接口
Use the skill only for packages you are comfortable querying through Kuaidi100, and do not provide extra personal data beyond what the courier requires.