ClawHub

DHL Tracking

v1.0.0

Track DHL parcels in Germany via the dhl.de API. Use when a user asks to track a DHL package, check delivery status, monitor a shipment, or wants notificatio...

⭐ 0· 76·0 current·0 all-time
by@idrs
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the included scripts and SKILL.md. The Python and shell scripts perform simple HTTP GETs against the DHL endpoint and format the returned JSON; nothing in the package requests unrelated services, credentials, or system resources.
ℹ
Instruction Scope
SKILL.md stays on-topic (how to call the endpoint, expected JSON structure, and how to poll). It does provide guidance about varying User-Agent or adding a Referer if the endpoint becomes protected, which is guidance for working around bot protection — functionally relevant but worth noting from a policy/terms-of-service perspective. The scripts only read stdin/argv and network responses; they do not access other system files or environment variables.
✓
Install Mechanism
No install spec; the skill is instruction-only plus two small scripts. Nothing is downloaded from external installers or written to disk by an installer step beyond the included files.
✓
Credentials
No environment variables, credentials, or config paths are requested. The skill does not attempt to access secrets or unrelated services.
✓
Persistence & Privilege
always is false and the skill does not request elevated persistence or modify other skills/config. Autonomous invocation is allowed (platform default) but not combined with other concerning privileges.
Assessment
This skill appears coherent and low-risk: it simply queries a DHL JSON endpoint and formats results. Things to consider before installing: (1) The skill scrapes an internal/undocumented DHL endpoint and the SKILL.md even suggests changing User-Agent/Referer if Akamai starts blocking — that may violate DHL's terms of service and could stop working if protections change. (2) Be conservative with polling (the author recommends no faster than once per minute). (3) If you need guaranteed, long-term/large-scale tracking or legal compliance, use DHL's official API (requires registration/API key). (4) The included scripts are short and readable; review them yourself if you want to confirm behavior. If you accept potential fragility and the TOS implications, this skill is internally consistent and does not request sensitive credentials.

Like a lobster shell, security has layers — review code before you run it.

latestvk974mq8zrj9f2qt9mw1t9vndxn83kz2m

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments