← Back to Skills Marketplace
252
Downloads
1
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install shippo-official
Description
(Beta) Ship packages with Shippo. Multi-carrier rate shopping, label generation, package tracking, address validation, customs declarations, and batch proces...
Usage Guidance
This skill appears to implement Shippo functionality and only asks for your SHIPPO_API_KEY, which is appropriate. Before installing or running it, check these things: (1) the SKILL.md expects Node.js >=18 and npx but the registry metadata did not declare required binaries — ensure your environment has Node and npx and understand that runtime will execute 'npx @shippo/shippo-mcp'. (2) npx will fetch and run an npm package on-demand; confirm the package (@shippo/shippo-mcp) and its source (npm/GitHub) are trustworthy and consider pinning a known-good version. (3) The MCP process is passed your API key on the command line (ShippoToken …); be aware local processes can potentially leak secrets if compromised. (4) Test initially with a shippo_test_* key (no charges) and review network activity / process behavior if you are in a sensitive environment. If you need higher assurance, ask the publisher for a signed release or an install spec that pins the MCP binary/version and declares the required binaries.
Capability Analysis
Type: OpenClaw Skill
Name: shippo-official
Version: 1.0.3
The shippo-official skill bundle is a legitimate integration for the Shippo shipping service via the Model Context Protocol (MCP). It provides comprehensive tools for address validation, rate shopping, label generation, and tracking. The instructions in SKILL.md explicitly include security safeguards, such as requiring a 'Purchase Confirmation Gate' before any financial transactions are executed. The skill uses the official Shippo API (api.goshippo.com) and follows standard patterns for local MCP server execution without any evidence of data exfiltration, malicious instructions, or obfuscation.
Capability Tags
Capability Assessment
Purpose & Capability
Name/description (Shippo shipping) align with required SHIPPO_API_KEY and the documented MCP toolset. However, the SKILL.md requires Node.js 18+ and use of 'npx @shippo/shippo-mcp' at runtime, while the registry metadata lists no required binaries — a practical mismatch between declared requirements and what the runtime actually needs.
Instruction Scope
SKILL.md stays on-topic: address validation, rate shopping, shipments, customs, and CSV batch workflows. It only instructs use of the SHIPPO_API_KEY and local MCP calls; it does not ask the agent to read unrelated files or other credentials. It does instruct the agent to launch a local MCP process and to pass the API key in the command args (expected for this integration).
Install Mechanism
There is no formal install spec, but the runtime instructions expect to run 'npx @shippo/shippo-mcp', which will fetch and run code from the npm registry on-demand. Pulling and executing an npm package at runtime is a moderate risk vector (remote code execution surface and dependency update risks). The referenced package name looks appropriate for the purpose, but the registry metadata and skill files do not lock or vet the package version.
Credentials
Only SHIPPO_API_KEY is required and declared as the primary credential. That is proportionate to a Shippo integration. The SKILL.md does not request other unrelated secrets or config paths.
Persistence & Privilege
The skill is user-invocable, not always-on, and has no install script or persisted system-wide configuration in the metadata. The main persistence/privilege note is that it instructs running a local MCP process (stdio transport) which will run until stopped — expected for this design but worth being aware of.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install shippo-official - After installation, invoke the skill by name or use
/shippo-official - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.3
Switch from Gram hosted MCP to standalone @shippo/shippo-mcp (beta).
v1.0.1
- Improved documentation and instructions in SKILL.md, including detailed guides for address validation, rate shopping, and label purchase workflows.
- Clarified the required SHIPPO_API_KEY environment variable and setup steps.
- Added explanations of API modes (test vs live), field naming conventions, and handling of international shipments.
- Expanded troubleshooting and best practices sections to help users resolve common issues.
- No code changes; this release focuses on comprehensive documentation enhancements.
Metadata
Frequently Asked Questions
What is Shippo Clawhub Skill?
(Beta) Ship packages with Shippo. Multi-carrier rate shopping, label generation, package tracking, address validation, customs declarations, and batch proces... It is an AI Agent Skill for Claude Code / OpenClaw, with 252 downloads so far.
How do I install Shippo Clawhub Skill?
Run "/install shippo-official" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Shippo Clawhub Skill free?
Yes, Shippo Clawhub Skill is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Shippo Clawhub Skill support?
Shippo Clawhub Skill is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Shippo Clawhub Skill?
It is built and maintained by Wyatt (@wyatt-shippo); the current version is v1.0.3.
More Skills