← Back to Skills Marketplace
Correios Rastreio
by
runawaydevil
· GitHub ↗
· v1.0.0
292
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install correios-rastreio
Description
Rastreie pacotes e encomendas dos Correios usando a API oficial com consultas por código, histórico e favoritos via comandos simples.
README (SKILL.md)
Correios Rastreio Skill
Rastreia pacotes e encomendas dos Correios via API oficial.
Gatilhos
Ative a skill usando:
"rastrear","rastreio"— rastrear código"onde está meu pacote"— verificar último"código dos correios"— ajuda"pedido","encomenda"— consultar
Como Usar
# Rastrear por código
node src/index.js track PW123456789BR
# Rastrear múltiplos códigos
node src/index.js track "PW123456789BR,AB987654321BR"
# Ver histórico local
node src/index.js history
# Adicionar aos favoritos (apelido)
node src/index.js save PW123456789BR "Presente aniversário"
# Listar favoritos
node src/index.js favorites
Configuração
Obtendo a API Key
-
Acesse o portal de desenvolvedores dos Correios: https://developers.correios.com.br
-
Crie uma conta ou faça login
-
Solicite acesso à API de Rastreamento
-
Copie sua API Key e configure:
export CORREIOS_API_KEY="sua_api_key_aqui"
Variáveis de Ambiente
CORREIOS_API_KEY— Token de autenticação (obrigatório)
API
- URL Base: https://api.correios.com.br
- Autenticação: Bearer Token
- Rate Limit: 3 requests/segundo
Usage Guidance
This skill's code implements Correios tracking and asks you to set CORREIOS_API_KEY — that is expected. However, the package metadata omitted the required env var and did not list Node.js as a runtime requirement; treat that as a sign the package metadata is incomplete. Before installing: (1) verify you will run it in a trusted environment with Node.js installed, (2) set CORREIOS_API_KEY in an environment you control (don't paste keys into public places), (3) be aware it stores history/favorites in a local data.json file inside the package folder (remove or inspect it if you don't want tracking codes saved), and (4) inspect the included src/index.js yourself (or run in a sandbox) — there are minor bugs/typos in the code (undefined variable used when formatting results) but no obvious exfiltration endpoints beyond the official Correios API. If you need metadata corrected (declare CORREIOS_API_KEY and Node as requirements), ask the publisher for an updated package before trusting it.
Capability Analysis
Type: OpenClaw Skill
Name: correios-rastreio
Version: 1.0.0
The skill is a legitimate tool for tracking Brazilian postal service (Correios) packages using their official API (api.correios.com.br). It handles authentication via an environment variable and maintains a local history/favorites file (src/data.json). While there is a minor coding bug in src/index.js (an undefined variable 'ultimohora' in the output formatting), there are no signs of malicious intent, data exfiltration, or prompt injection.
Capability Assessment
Purpose & Capability
The skill's code and SKILL.md implement Correios package tracking via the official API (axios calls to api.correios.com.br). However, registry metadata lists no required env vars or binaries while the SKILL.md and code require CORREIOS_API_KEY and Node.js to run; this mismatch is unexplained.
Instruction Scope
Runtime instructions are narrowly scoped to calling the Correios API and local CLI operations. The SKILL.md does not mention that the tool stores history/favorites in a local data.json file (src/data.json path); the code reads/writes that file. No unrelated system paths or external endpoints beyond the Correios API are used.
Install Mechanism
There is no install spec (instruction-only claimed), but a Node.js project is included (package.json, package-lock.json, src/index.js). The skill depends on axios. The registry metadata does not declare Node as a required binary, which is inconsistent but not high-risk; no arbitrary remote downloads or extract steps are present.
Credentials
The only secret the code uses is CORREIOS_API_KEY (Bearer token) which is appropriate for calling the Correios API. However, the registry metadata does not declare this required env var (SKILL.md does), creating an inconsistency the user should resolve before trusting the package.
Persistence & Privilege
The skill does not request elevated privileges or global persistence. It writes a local data.json file (history and favorites) inside the package directory; this is normal for a CLI tool but means tracking codes are stored locally and could be inspected by others with filesystem access.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install correios-rastreio - After installation, invoke the skill by name or use
/correios-rastreio - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release: Rastreie pacotes dos Correios via API oficial. Suporta múltiplos códigos, histórico local e favoritos.
Metadata
Frequently Asked Questions
What is Correios Rastreio?
Rastreie pacotes e encomendas dos Correios usando a API oficial com consultas por código, histórico e favoritos via comandos simples. It is an AI Agent Skill for Claude Code / OpenClaw, with 292 downloads so far.
How do I install Correios Rastreio?
Run "/install correios-rastreio" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Correios Rastreio free?
Yes, Correios Rastreio is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Correios Rastreio support?
Correios Rastreio is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Correios Rastreio?
It is built and maintained by runawaydevil (@runawaydevil); the current version is v1.0.0.
More Skills