← Back to Skills Marketplace
aiwithabidi

Easypost

by aiwithabidi · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
383
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install easypost
Description
EasyPost — shipping labels, rate comparison, package tracking, address verification, and insurance.
README (SKILL.md)

🚚 EasyPost

EasyPost — shipping labels, rate comparison, package tracking, address verification, and insurance.

Requirements

Variable Required Description
EASYPOST_API_KEY ✅ EasyPost API key

Quick Start

# Create shipment & get rates
python3 {{baseDir}}/scripts/easypost.py create-shipment --from "JSON address" --to "JSON address" --parcel "JSON"

# Get shipment details
python3 {{baseDir}}/scripts/easypost.py get-shipment \x3Cid>

# List shipments
python3 {{baseDir}}/scripts/easypost.py list-shipments --page-size "20"

# Buy label for shipment
python3 {{baseDir}}/scripts/easypost.py buy-shipment \x3Cid> --rate-id \x3Cvalue>

# Create a tracker
python3 {{baseDir}}/scripts/easypost.py create-tracker --tracking-code \x3Cvalue> --carrier \x3Cvalue>

# Get tracker details
python3 {{baseDir}}/scripts/easypost.py get-tracker \x3Cid>

# List trackers
python3 {{baseDir}}/scripts/easypost.py list-trackers --page-size "20"

# Verify/create address
python3 {{baseDir}}/scripts/easypost.py verify-address --street1 \x3Cvalue> --city \x3Cvalue> --state \x3Cvalue> --zip \x3Cvalue> --country "US"

# Insure a shipment
python3 {{baseDir}}/scripts/easypost.py create-insurance --shipment-id \x3Cvalue> --amount \x3Cvalue>

# Refund a label
python3 {{baseDir}}/scripts/easypost.py create-refund --carrier \x3Cvalue> --tracking-codes "comma-separated"

# List rates for shipment
python3 {{baseDir}}/scripts/easypost.py list-rates \x3Cid>

# Create return shipment
python3 {{baseDir}}/scripts/easypost.py create-return --from "JSON" --to "JSON" --parcel "JSON" --is-return "true"

Output Format

All commands output JSON by default.

Script Reference

Script Description
{baseDir}/scripts/easypost.py Main CLI — all commands in one tool

Credits

Built by M. Abidi | agxntsix.ai YouTube | GitHub Part of the AgxntSix Skill Suite for OpenClaw agents.

📅 Need help setting up OpenClaw for your business? Book a free consultation

Usage Guidance
This skill is largely consistent with an EasyPost CLI, but inspect and test before trusting it with real credentials. Specific things to consider: (1) The script will try to read EASYPOST_API_KEY from a .env file in WORKSPACE or ~/.openclaw/workspace if the env var is absent — check whether you have a .env there and what it contains, or explicitly set EASYPOST_API_KEY to avoid that fallback. (2) The CLI code contains argument name mismatches/bugs (e.g., functions expect args named 'from' but the parser sets dest='from_addr'), so some commands may not work as written — validate functionality in a safe environment. (3) The script only communicates with api.easypost.com, and does not contact other external endpoints, but you should still review the code locally and run it with a test API key or in a sandbox before using production credentials.
Capability Analysis
Type: OpenClaw Skill Name: easypost Version: 1.0.0 The skill is classified as suspicious due to a potential vulnerability in the `get_env` function within `scripts/easypost.py`. This function attempts to read the `EASYPOST_API_KEY` from a `.env` file located in the `WORKSPACE` directory (or `~/.openclaw/workspace`). If an attacker could manipulate the `WORKSPACE` environment variable, they might be able to direct the script to read a `.env` file from an arbitrary, unintended location, potentially leading to information disclosure. While the script's stated purpose is legitimate EasyPost API interaction and there's no clear evidence of intentional malicious exfiltration or arbitrary code execution, this file access pattern based on an environment variable presents a vulnerability that could be exploited in a compromised agent environment.
Capability Assessment
✓ Purpose & Capability
Name and description match the implemented functionality. The only required credential is EASYPOST_API_KEY and the script performs shipping, tracking, address verification, insurance, and refunds against https://api.easypost.com/v2 which aligns with the stated purpose.
⚠ Instruction Scope
SKILL.md instructs running the included CLI and only documents EASYPOST_API_KEY, but the script will also attempt to read a .env file from a WORKSPACE path (or ~/.openclaw/workspace/.env) if the env var is not set. That fallback behavior is not documented and means the tool will read files from the user's workspace without explicit mention.
✓ Install Mechanism
Instruction-only skill with a bundled Python script; there is no install step or external download. No packages or arbitrary URLs are fetched or executed at install time.
⚠ Credentials
Declared required credential is a single EASYPOST_API_KEY (expected). However the script also reads the WORKSPACE environment variable (not declared) and will parse a .env file there to find the API key as a fallback. That implicit access to a workspace file could expose other local secrets if users rely on shared .env files; the skill does not declare or document this behavior.
✓ Persistence & Privilege
Skill does not request persistent/always-on privileges, does not modify other skills or system-wide settings, and defaults for autonomous invocation are normal.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install easypost
  3. After installation, invoke the skill by name or use /easypost
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of the easypost skill. - Provides shipping label creation, rate comparison, package tracking, address verification, and insurance via EasyPost. - CLI tool for managing shipments, trackers, refunds, and rates. - Outputs results in JSON format. - No external dependencies; requires only Python 3.10+ and an EASYPOST_API_KEY. - Full command list and usage examples included.
Metadata
Slug easypost
Version 1.0.0
License —
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Easypost?

EasyPost — shipping labels, rate comparison, package tracking, address verification, and insurance. It is an AI Agent Skill for Claude Code / OpenClaw, with 383 downloads so far.

How do I install Easypost?

Run "/install easypost" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Easypost free?

Yes, Easypost is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Easypost support?

Easypost is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Easypost?

It is built and maintained by aiwithabidi (@aiwithabidi); the current version is v1.0.0.

More Skills
self-improving agent
Captures learnings, errors, and corrections to enable continuous improvement. Use when: (1) A command or operation fails unexpectedly, (2) User corrects Clau...
⬇ 463283 · by pskoett
Skill Vetter
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope, and suspicious patterns.
⬇ 259410 · by spclaudehome
Polymarket
Query Polymarket prediction markets. Check odds, find trending markets, search events, track price movements.
⬇ 232503 · by joelchance
Self-Improving + Proactive Agent
Self-reflection + Self-criticism + Self-learning + Self-organizing memory. Agent evaluates its own work, catches mistakes, and improves permanently. Use when...
⬇ 200423 · by ivangdavila
Github
Interact with GitHub using the `gh` CLI. Use `gh issue`, `gh pr`, `gh run`, and `gh api` for issues, PRs, CI runs, and advanced queries.
⬇ 191113 · by steipete
ontology
Typed knowledge graph for structured agent memory and composable skills. Use when creating/querying entities (Person, Project, Task, Event, Document), linkin...
⬇ 190156 · by oswalpalash

💬 Comments