← Back to Skills Marketplace
Parcel Package Tracking
by
Gustavo Madeira Santana
· GitHub ↗
· v1.0.0
2223
Downloads
1
Stars
8
Active Installs
1
Versions
Install in OpenClaw
/install parcel-package-tracking
Description
Track and add deliveries via Parcel API.
Usage Guidance
Do not install blindly. The SKILL.md says the skill needs PARCEL_API_KEY and runs a Node script, but the registry metadata does not declare those requirements (no env vars, no required binaries). Ask the publisher to explain and update the metadata. Before installing, review the parcel-api.js source to confirm it only talks to Parcel's API and doesn't read other files or send data elsewhere. Ensure Node is available in a controlled environment, store your PARCEL_API_KEY securely (least privilege), and consider running the skill in a sandbox or with limited network access if you cannot verify the code.
Capability Analysis
Type: OpenClaw Skill
Name: parcel-package-tracking
Version: 1.0.0
The skill bundle is benign. It provides a client for the Parcel API, requiring a `PARCEL_API_KEY` environment variable for authentication, as explicitly stated in `SKILL.md`. The `parcel-api.js` script makes legitimate HTTPS requests to `api.parcel.app` for tracking, adding deliveries, and listing carriers. There is no evidence of prompt injection, data exfiltration, malicious execution, persistence, or obfuscation. All actions are clearly aligned with the stated purpose of interacting with the Parcel app.
Capability Assessment
Purpose & Capability
The skill's stated purpose (track and add deliveries via Parcel API) matches the SKILL.md which requests a PARCEL_API_KEY and shows calls to a parcel-api.js script. However the registry metadata does not declare the PARCEL_API_KEY requirement (metadata lists no required env vars), which is an inconsistency.
Instruction Scope
SKILL.md instructs only to call the included Node script to list/add deliveries and to set PARCEL_API_KEY. It does not instruct the agent to read unrelated files or exfiltrate data to unexpected endpoints. The instructions do reference a specific path (~/.clawdbot/skills/parcel/parcel-api.js) and the Parcel web site for the API key, which is consistent with the described functionality.
Install Mechanism
There is no install spec (instruction-only), which is low risk. However the skill includes a code file (parcel-api.js) that will be executed via 'node' according to SKILL.md. The registry's 'required binaries' list claims none, so the SKILL.md's reliance on the Node runtime is not reflected in metadata — another inconsistency to address.
Credentials
SKILL.md requires a PARCEL_API_KEY environment variable (appropriate for accessing Parcel's API), but the published metadata does not list any required env vars. This could lead to the skill having access to a credential that the registry metadata doesn't advertise. The single API key itself is proportionate to the stated purpose, but the metadata mismatch is concerning.
Persistence & Privilege
The skill does not set always:true and does not disable model invocation, so it can be invoked by the model when eligible (default behavior). This is typical for integration skills; nothing here indicates excessive persistent privileges.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install parcel-package-tracking - After installation, invoke the skill by name or use
/parcel-package-tracking - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of the Parcel package tracking skill.
- Track deliveries and add new packages via the Parcel API.
- Supports listing deliveries (recent, active), adding packages, and searching carriers.
- Requires configuration with PARCEL_API_KEY.
Metadata
Frequently Asked Questions
What is Parcel Package Tracking?
Track and add deliveries via Parcel API. It is an AI Agent Skill for Claude Code / OpenClaw, with 2223 downloads so far.
How do I install Parcel Package Tracking?
Run "/install parcel-package-tracking" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Parcel Package Tracking free?
Yes, Parcel Package Tracking is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Parcel Package Tracking support?
Parcel Package Tracking is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Parcel Package Tracking?
It is built and maintained by Gustavo Madeira Santana (@gumadeiras); the current version is v1.0.0.
More Skills