中文快递查询
PassAudited by VirusTotal on May 6, 2026.
Overview
Type: OpenClaw Skill Name: cn-express-tracker-2 Version: 0.1.0 The skill bundle provides a utility for tracking Chinese express shipments using a Python script and the Kuaidi100 interface. The documentation (SKILL.md) clearly outlines the usage, supported carriers, and workflows without any signs of malicious intent, prompt injection, or unauthorized data access. The request for the last four digits of a phone number for SF Express tracking is a standard requirement for that carrier's privacy verification.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The skill may not work as installed, or a user/agent may be tempted to obtain or run an unreviewed helper script.
The skill depends on helper files that are referenced in the instructions but not included in the supplied file manifest, leaving the actual implementation unavailable for review.
python3 scripts/track.py --num <快递单号> ... 完整代码表见 `references/courier-codes.md`
Only run a helper script if it is present in the installed skill directory and has been reviewed; the publisher should include the referenced files or update the instructions.
Providing phone-number digits plus a tracking number may reveal private shipping information.
Some lookups may request the last four digits of a sender or recipient phone number, which can function as verification data for accessing shipment details.
顺丰单号部分需要寄件人或收件人手机号后四位（单独询问用户）
Provide only the minimum details needed for the lookup, and avoid sharing full phone numbers or unrelated personal information.
A third-party tracking service may receive the shipment number and associated query details.
The skill discloses that package-tracking queries use an external provider, so tracking numbers and related lookup data may be sent to Kuaidi100.
数据来源：快递100（kuaidi100.com）免费查询接口
Use the skill only for packages you are comfortable querying through Kuaidi100, and do not provide extra personal data beyond what the courier requires.