← 返回 Skills 市场

Brazilian CEP using the ViaCEP API

Name: Brazilian CEP using the ViaCEP API
Author: guilherme-funchal

作者 guilherme-funchal · GitHub ↗ · v1.0.0 · MIT-0

cross-platform ✓ 安全检测通过

总下载

当前安装

版本数

在 OpenClaw 中安装

/install cep-lookup

功能描述

Looks up address data for a Brazilian CEP using the ViaCEP API.

使用说明 (SKILL.md)

CEP Lookup

Looks up the full address for a Brazilian postal code (CEP) using the public ViaCEP API. No authentication required.

Triggers

Use this skill when the user mentions a CEP in any of these formats:

cep 01001-000
CEP 20040020
details for CEP 30140-110

Output

The skill returns:

Street (logradouro)
Neighborhood (bairro)
City (localidade)
State (UF)
Complement, if available (complemento)

Error handling

Invalid CEP format → usage instruction
CEP not found in ViaCEP database → informative message
Network failure → generic error message

安全使用建议

This skill appears to do exactly what it says: it needs node/npm and the axios npm dependency to make outgoing HTTPS requests to the public ViaCEP API. Before installing, note: (1) installation will run npm install which downloads packages from the public registry; review package.json if you want to vet dependencies. (2) When invoked the skill will send the CEP (postal code) to viacep.com.br — if CEPs you send are considered private in your context, avoid sharing them. (3) The SKILL.md metadata has a small mismatch (it lists axios as a binary), but that is harmless. If you want extra assurance, run the included tests in mock mode (node test.js --mock) to verify local behavior without network calls.

功能分析

Type: OpenClaw Skill Name: cep-lookup Version: 1.0.0 The skill is a legitimate tool for looking up Brazilian postal codes (CEP) using the public ViaCEP API. The code in index.js and test.js is straightforward, well-documented, and contains no signs of data exfiltration, malicious execution, or prompt injection.

能力评估

✓ Purpose & Capability

Name/description match the implementation: index.js calls the ViaCEP public API and returns address fields. Declared runtime (node + npm) and the dependency on axios are reasonable for an HTTP-based lookup.

✓ Instruction Scope

SKILL.md limits behavior to CEP lookups, describes triggers and outputs, and does not instruct reading unrelated files or environment variables. The runtime code only reads the incoming message text and performs an HTTP GET to viacep.com.br.

ℹ Install Mechanism

This is effectively an instruction-only skill but includes code and package.json; installation is via npm (axios dependency). The SKILL.md 'install' block suggests installing axios via an npm installer entry and lists a 'bins' field for axios (axios is a library, not a CLI binary) — this is a minor metadata inconsistency but not a security concern. No downloads from untrusted URLs or archive extraction are present.

✓ Credentials

No environment variables, credentials, or config paths are requested. The code does not access process.env or other secrets. The test runner monkeypatches module loading in local test mode only and does not introduce secret access.

✓ Persistence & Privilege

Skill does not request always:true and does not modify other skills or system-wide configuration. It uses normal autonomous invocation defaults; this is expected for a user-invocable lookup skill.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install cep-lookup
安装完成后，直接呼叫该 Skill 的名称或使用 /cep-lookup 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

- Initial release of cep-lookup skill. - Fetches Brazilian address data by CEP using the ViaCEP API. - Returns street, neighborhood, city, state, and complement when available. - Handles invalid CEP formats, not found errors, and network issues with clear messages. - Requires Node.js, npm, and the axios library for HTTP requests.

元数据

Slug cep-lookup

版本 1.0.0

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 1

常见问题