📦 Package Track — 全球快递跟踪
v1.0.1通过统一 API 查询全球包裹/快递物流状态，已集成快递鸟(Kdniao)并可扩展其他服务商，支持用户随时追踪包裹动态。
0· 277·1 当前·1 累计
by 下载技能包
最后更新
2026/3/12
安全扫描
OpenClaw
安全
high confidenceThe skill's code, instructions, and requirements match its stated purpose (querying courier tracking via 快递鸟/Kdniao); it requests no unrelated credentials or unusual installs.
评估建议
This skill appears to do exactly what it says: it posts signed requests to 快递鸟 (Kdniao) and returns the API response. Before installing, (1) keep your Kdniao EBusinessID and ApiKey out of source control (package_tracker.json should not be committed); (2) verify the GitHub homepage/repository matches the publisher you trust; (3) be aware the skill will make outbound HTTP(S) requests to Kdniao endpoints (ensure network policy allows that); and (4) run or inspect the included Python files locally i...详细分析 ▾
✓ 用途与能力
Name/description match the included Python package and CLI. Required binary is only python and the code implements a Kdniao provider and a registry for additional providers — all appropriate for a package-tracking skill.
✓ 指令范围
SKILL.md instructs storing provider credentials in package_tracker.json and running the provided CLI or importing get_tracker(). The runtime instructions and code only read package_tracker.json (in CWD or explicit path) and call Kdniao endpoints; they do not request unrelated files, environment variables, or external endpoints beyond Kdniao.
✓ 安装机制
No install spec is provided (instruction-only from the registry's perspective). The bundle includes plain Python source (no third-party downloads or archive extraction). No suspicious installer URLs or extracted archives are present.
✓ 凭证需求
The skill declares no required environment variables or credentials. It expects API credentials to be placed in package_tracker.json (local config) which is proportional to its function. The code does not read other env vars or secrets.
✓ 持久化与权限
always is false and disable-model-invocation is default (agent may call autonomously, which is normal). The skill does not request persistent system-wide privileges or modify other skills' configs.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.12026/3/12
- Refactored codebase to use internal package structure (`package_tracker/`), improving modularity and clarity. - Added example configuration file: `package_tracker.json.example`. - Provided a requirements.txt for Python dependencies. - Removed top-level Python source files to avoid duplication; all source now resides under `package_tracker/`. - No changes affecting user-facing API or usage.
● 无害
安装命令
点击复制官方npx clawhub@latest install package-track
镜像加速npx clawhub@latest install package-track --registry https://cn.longxiaskill.com