Bijie Express Tracking
v1.1.0Fast package tracking and logistics timeline lookup for 2000+ couriers with BijieServ. Use for 查快递, 快递查询, 查物流, 物流轨迹, 快递到哪了, 包裹追踪, track package, where is my...
⭐ 0· 98·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (package tracking via BijieServ) match the included script and SKILL.md: the Python script posts tracking numbers to bijieserv.com and formats results. No unrelated credentials, binaries, or config paths are requested.
Instruction Scope
SKILL.md is focused on extracting tracking data, mapping couriers, running the local script, masking sensitive fields, and returning concise results. It does not instruct the agent to read unrelated files, harvest environment variables, or send data to unexpected endpoints.
Install Mechanism
There is no install spec (instruction-only), so nothing is automatically downloaded or written at install time. The repo includes package.json/package-lock (Node deps) even though the runtime uses a Python script; this is unnecessary but not harmful by itself.
Credentials
The skill requests no environment variables, credentials, or config paths. The only external interaction is HTTP POST to https://www.bijieserv.com which is appropriate for a tracking service. It does accept optional phone/origin/destination inputs from the user (documented).
Persistence & Privilege
The skill is not marked always:true and does not persist or modify system/global configurations. Query history is kept in-memory only for short-term anti-rate-limit checks.
Assessment
This skill appears to do exactly what it says: it runs a local Python script that posts tracking numbers (and optional phone/address hints you supply) to bijieserv.com and returns a masked, human-friendly timeline. It does not request secrets or access unrelated system files. Before installing, consider: (1) only provide the minimum personal data needed (avoid sending full recipient addresses or unnecessary phone numbers), (2) verify you trust the external service (bijieserv.com) because tracking queries are sent there, and (3) be aware package.json is present but not used by the Python runtime — it's benign but unnecessary. If you need stronger privacy, avoid supplying recipient phone or full addresses.Like a lobster shell, security has layers — review code before you run it.
chinavk97eexkp9snyf5f4t2xn83vkxs84feqacouriervk97eexkp9snyf5f4t2xn83vkxs84feqalatestvk97eexkp9snyf5f4t2xn83vkxs84feqalogisticsvk97eexkp9snyf5f4t2xn83vkxs84feqashippingvk97eexkp9snyf5f4t2xn83vkxs84feqatrackingvk97eexkp9snyf5f4t2xn83vkxs84feqa
License
MIT-0
Free to use, modify, and redistribute. No attribution required.