17track package tracking

Track parcels via the 17TRACK API (local SQLite DB, polling + optional webhook ingestion)

This skill is coherent with its purpose, but review and small precautions before enabling are recommended: - Confirm TRACK17_TOKEN is a token you intend to give to this skill and use a token with minimal scope if possible. - Be aware the script writes a SQLite DB and raw webhook payloads under <workspace>/packages/track17/ (or TRACK17_DATA_DIR if set). If you prefer a specific location, set TRACK17_DATA_DIR or TRACK17_WORKSPACE_DIR before first use. - If you enable webhooks: prefer to run the webhook-server bound to localhost behind a reverse proxy or use a tunnelling service (as the README suggests). Do not run the webhook-server publicly without configuring TRACK17_WEBHOOK_SECRET and verifying signatures. - Inspect scripts/track17.py yourself (it’s included) before enabling; because it is executed locally, review ensures it matches your risk tolerance. - Run in a restricted environment or sandbox if you want to limit where files can be written. If you don’t need push webhooks, use the polling (sync) workflow to minimize exposed surface. If you want extra assurance, ask for a short summary of the script's network endpoints and file paths and a confirmation that it will not contact any hosts other than 17track/res.17track.net.

Type: OpenClaw Skill Name: track17 Version: 0.1.0 The OpenClaw AgentSkills skill bundle for 'track17' is benign. The `SKILL.md` provides clear instructions for the agent, including an explicit directive to 'Never echo `TRACK17_TOKEN` or `TRACK17_WEBHOOK_SECRET`', which is a strong positive security indicator against prompt injection for credential exfiltration. The `scripts/track17.py` script uses only the Python standard library, accesses only legitimate 17TRACK API endpoints, and confines all local data storage (SQLite DB, webhook inbox, cache) to the expected skill data directory within the workspace. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, obfuscation, or suspicious supply chain practices.