多平台快递查询
v1.0.0根据快递单号识别承运商，查询并解析物流轨迹，判断异常状态，提供准确的物流状况和处理建议。
⭐ 0· 99·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the included scripts, rules, and data (identify.py, query.py, carriers references, official_sources). The code only builds identification and query plans/URLs; nothing requires unrelated credentials or system access.
Instruction Scope
Runtime instructions stay within tracking: identify courier, open aggregator/official pages with browser/web_fetch, parse timeline, and apply anomaly rules. Note: the SKILL asks the agent to use browser/web_fetch and to prompt the user if verification is required (e.g., 'need phone last 4 digits', 'need login', 'captcha'), which is expected for some official queries but is a privacy-sensitive action — the skill itself does not instruct reading local files or env vars.
Install Mechanism
No install spec; instruction-only plus included Python scripts. No downloads, package installs, or archive extraction are present.
Credentials
The skill declares no required env vars or credentials (appropriate). It may ask the user for verification details (phone tail digits or login) as part of using official channels — this is plausible but privacy-sensitive; the skill does not request unrelated secrets or system credentials.
Persistence & Privilege
always is false and there is no installation step altering agent/system config or requesting permanent presence. The default autonomous invocation setting is unchanged (normal).
Assessment
This skill appears to do what it says: identify carriers, build query plans, parse timelines, and apply anomaly rules. Before installing: (1) Note it uses browser/web_fetch to open aggregator or official pages — if you allow an agent to use a browser tool it will visit web pages; do not allow the agent to enter your full login credentials. (2) The skill may ask you to provide verification details (e.g., phone last 4 digits) to access some official queries — only share minimal, non-sensitive info you are comfortable disclosing. (3) There are no hidden network endpoints or required environment secrets in the package, but if you connect this skill to tools that can submit forms or sign in, review those tool permissions. If you want extra assurance, run the Python scripts locally to inspect behavior before granting the agent browser/web_fetch capabilities.Like a lobster shell, security has layers — review code before you run it.
latestvk978d5sjxjqr9bmzvy2pw2ka1d838y1m
License
MIT-0
Free to use, modify, and redistribute. No attribution required.