Logistics Tracker

物流跟踪技能，对接 17Track 批量 API，自动跟踪运单状态，向客户发送邮件通知，并在异常时告警。

Before installing or running this skill: 1) Be aware the manifest omitted required credentials — you must supply a 17Track API key (TRACK17_API_KEY) and possibly a trackingmore key; verify where keys are stored (config file vs environment). 2) The skill reads files and executes scripts from other skills (order-tracker and imap-smtp-email). Only install/run this if you trust those other skills and understand it will access their data and SMTP credentials. 3) No install steps are provided — you'll likely need Node ≥18 and to run npm install; run in an isolated environment first. 4) Review the included scripts (tracking-api, customer-notify, anomaly-detector) for any endpoints or hard-coded targets you don't recognize, and check that calls to child_process (execFileSync) only invoke expected local scripts. 5) If you want lower risk, require the skill to explicitly declare the env vars and config paths it expects, and run it with limited filesystem permissions or inside a container so its cross-skill file access is constrained.

Type: OpenClaw Skill Name: ssa-logistics-tracker Version: 1.0.0 The ssa-logistics-tracker skill is a comprehensive logistics management tool designed to track shipments via the 17Track API. It includes modules for status persistence (shipment-store.js), anomaly detection (anomaly-detector.js), and automated customer notifications (customer-notify.js). The skill interacts with other local skills like order-tracker and imap-smtp-email using standard file access and execFileSync for inter-process communication. No evidence of malicious intent, data exfiltration, or unauthorized persistence was found; the code is well-documented and aligns with its stated purpose.