Global Package Tracking - 全球物流快递查询
v1.0.0全球快递物流状态查询。输入快递单号，查询包裹的实时物流轨迹和当前状态，支持顺丰、圆通、申通、中通、韵达、京东、EMS、DHL、FedEx、UPS 等全球上千家快递公司。使用场景：用户说"帮我查一下这个快递到哪了"、"顺丰单号 SF1234567890 的物流"、"查快递 YT1234567890"、"我的包裹到了...
⭐ 0· 87·0 current·0 all-time
byjuhe-skills@juhemcp
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (global package tracking) matches the actual actions: a Python script calls the Juhe express API (v.juhe.cn). Requested resources (python3 and JUHE_EXPRESS_KEY) are appropriate and necessary for this functionality.
Instruction Scope
SKILL.md and the included script limit behavior to: parse user input, read the local references/express-company-list.json, optionally read JUHE_EXPRESS_KEY from env/.env/CLI, and call the Juhe API. It asks the agent to prompt users when the courier is missing and to request phone-tail digits only when required—this is consistent with the API.
Install Mechanism
No install spec; this is mostly instruction-only with a bundled Python script and a local JSON company list. No suspicious download or archive extraction is present.
Credentials
Only JUHE_EXPRESS_KEY is required and declared as the primary credential. That key is necessary to authenticate to the documented Juhe API. No unrelated secrets or extra environment variables are requested.
Persistence & Privilege
The skill is not always-enabled and does not request elevated or persistent platform privileges. It does not modify other skills or system-wide settings.
Assessment
This skill appears to do exactly what it says: it runs a local Python script that queries Juhe's express-tracking API using the provided JUHE_EXPRESS_KEY and a courier code from the bundled company list. Before installing or enabling: (1) obtain a Juhe AppKey and keep it secret (the key grants API access and has quota limits); (2) be aware that tracking results may include phone numbers or courier contact info returned by the API—avoid asking users to share full phone numbers (the script only requires last-4 digits for some carriers); (3) review Juhe's terms/privacy to ensure the provider's data handling is acceptable; (4) if you will allow autonomous agent invocation, consider whether automatic outbound API calls with user tracking numbers are acceptable in your environment. If you want extra assurance, inspect scripts/express_track.py (readable) and the local references JSON before enabling.Like a lobster shell, security has layers — review code before you run it.
latestvk97ejawn4t6g4mf9n03gfpr6es83j5kd
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📦 Clawdis
Binspython3
EnvJUHE_EXPRESS_KEY
Primary envJUHE_EXPRESS_KEY