← Back to Skills Marketplace
1846
Downloads
2
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install post-at
Description
Manage Austrian Post (post.at) deliveries - list packages, check delivery status, set delivery place preferences.
Usage Guidance
Before installing or running this skill, consider the following:
- Verify the source: check the referenced GitHub repo (https://github.com/krausefx/post-at-cli). Inspect the code and README to confirm the CLI's install method, published package name, and whether releases/tarballs are signed.
- Do not hand over credentials blindly: the SKILL.md requires POST_AT_USERNAME and POST_AT_PASSWORD. Only provide credentials to a CLI you have inspected and installed yourself from a trusted release. Prefer passing credentials interactively or via a secure vault rather than embedding them in long-lived environment variables if possible.
- Installation caution: the registry entry provides no install spec. If you must install the CLI, obtain it directly from the official repo or a verified package registry (and verify checksums). Avoid running arbitrary install scripts or downloading binaries from unknown URLs.
- Session storage: the CLI mentions caching short-lived session tokens. Review where and how tokens/sessions are stored on disk before using the tool on multi-user or shared machines.
- If you only need occasional checks, consider running the CLI locally on your machine rather than giving an autonomous agent access to your credentials.
The inconsistencies in metadata vs. SKILL.md (missing declared env vars and install instructions) suggest sloppy packaging rather than explicit malice, but they do increase risk—inspect the upstream code and install source before providing credentials or integrating the skill into autonomous workflows.
Capability Analysis
Type: OpenClaw Skill
Name: post-at
Version: 0.1.0
The skill bundle is benign. The `SKILL.md` clearly describes an unofficial CLI tool for managing Austrian Post deliveries, requiring `POST_AT_USERNAME` and `POST_AT_PASSWORD` via environment variables or CLI options, which is a standard and transparent method for handling credentials. All demonstrated commands are directly related to the stated purpose (listing deliveries, checking status, setting preferences). There is no evidence of prompt injection attempts against the agent, data exfiltration, malicious execution, persistence, or obfuscation. The skill's behavior is fully aligned with its stated purpose.
Capability Assessment
Purpose & Capability
The SKILL.md describes an unofficial CLI that logs into post.at and manages deliveries — requiring a post.at username/password — which is coherent with the stated purpose. However the registry metadata lists no required env vars or binaries while the SKILL.md explicitly expects POST_AT_USERNAME/POST_AT_PASSWORD and mentions node in its metadata, creating an inconsistency between claimed requirements and the runtime instructions.
Instruction Scope
The instructions are narrowly scoped to using a post-at CLI to list deliveries, get details, and set delivery-place preferences. They do not instruct the agent to read unrelated system files or exfiltrate data to third-party endpoints; the only external interaction implied is with post.at (the service the skill integrates with).
Install Mechanism
This is an instruction-only skill with no install spec or code files. SKILL.md metadata references node (implying a Node CLI), but there are no install steps provided. That means the skill itself won't write code to disk, but a user must separately obtain/install the post-at CLI (from the GitHub repo). The lack of an explicit install source or verified release instructions increases risk if the user installs an untrusted binary.
Credentials
SKILL.md requires POST_AT_USERNAME and POST_AT_PASSWORD (or CLI options) to log into post.at, which is proportionate to the task. The concern is that the registry metadata and the skill manifest declare no required env vars or primary credential, so the declared surface does not match what the runtime instructions actually need — this mismatch could lead a user to unknowingly supply credentials to an unvetted CLI.
Persistence & Privilege
The skill does not request always:true and has no install/persistence behavior declared. It does mention caching short-lived session tokens (typical for a CLI), but there is no indication that the skill will install persistent system-wide components or modify other skills' config.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install post-at - After installation, invoke the skill by name or use
/post-at - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.0
Initial release of the post-at CLI.
- Manage Austrian Post (post.at) deliveries: list, filter, and view details of packages.
- Set delivery place preferences (Wunschplatz) using custom or preset options.
- Supports login via environment variables or CLI options.
- Outputs delivery information in human-readable or JSON format.
- Includes command references and workflow examples for scripting and automation.
Metadata
Frequently Asked Questions
What is Post.at Tracking?
Manage Austrian Post (post.at) deliveries - list packages, check delivery status, set delivery place preferences. It is an AI Agent Skill for Claude Code / OpenClaw, with 1846 downloads so far.
How do I install Post.at Tracking?
Run "/install post-at" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Post.at Tracking free?
Yes, Post.at Tracking is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Post.at Tracking support?
Post.at Tracking is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Post.at Tracking?
It is built and maintained by KrauseFx (@krausefx); the current version is v0.1.0.
More Skills