Envios
PassAudited by ClawScan on May 1, 2026.
Overview
This is an instruction-only shipping support skill; its main caution is that it assumes authorized carrier-account access and handling of customer delivery data.
This skill appears safe to install as an instruction-only shipping helper, but use it only in contexts where the agent/operator is authorized to access carrier accounts and customer delivery data. Confirm before looking up orders or sending WhatsApp messages, and avoid sharing more customer information than necessary.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If used with the wrong account or without authorization, customer shipping records could be exposed or accessed improperly.
The skill instructs use of carrier accounts and customer-name lookups. That is aligned with shipment tracking, but it involves business account access and customer order data.
Ingresar a la cuenta de la empresa correspondiente al envío (Andreani u OCA) ... Buscar el pedido por nombre del cliente
Use only authorized carrier accounts, prefer least-privilege access, and confirm that the operator is allowed to look up the specific customer order.
Customer addresses or tracking details may be shared outside the immediate chat or business system.
The workflow sends or uses customer delivery information through external services such as Google Maps and WhatsApp. This is expected for delivery support, but it involves customer personal data and third-party channels.
Validarla en Google Maps ... Enviárselo al cliente por WhatsApp
Share only the minimum necessary information, use approved business accounts/channels, and avoid sending sensitive delivery details unless the customer and business process authorize it.
