← 返回 Skills 市场
Easypost
作者
aiwithabidi
· GitHub ↗
· v1.0.0
383
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install easypost
功能描述
EasyPost — shipping labels, rate comparison, package tracking, address verification, and insurance.
使用说明 (SKILL.md)
🚚 EasyPost
EasyPost — shipping labels, rate comparison, package tracking, address verification, and insurance.
Requirements
| Variable | Required | Description |
|---|---|---|
EASYPOST_API_KEY |
✅ | EasyPost API key |
Quick Start
# Create shipment & get rates
python3 {{baseDir}}/scripts/easypost.py create-shipment --from "JSON address" --to "JSON address" --parcel "JSON"
# Get shipment details
python3 {{baseDir}}/scripts/easypost.py get-shipment \x3Cid>
# List shipments
python3 {{baseDir}}/scripts/easypost.py list-shipments --page-size "20"
# Buy label for shipment
python3 {{baseDir}}/scripts/easypost.py buy-shipment \x3Cid> --rate-id \x3Cvalue>
# Create a tracker
python3 {{baseDir}}/scripts/easypost.py create-tracker --tracking-code \x3Cvalue> --carrier \x3Cvalue>
# Get tracker details
python3 {{baseDir}}/scripts/easypost.py get-tracker \x3Cid>
# List trackers
python3 {{baseDir}}/scripts/easypost.py list-trackers --page-size "20"
# Verify/create address
python3 {{baseDir}}/scripts/easypost.py verify-address --street1 \x3Cvalue> --city \x3Cvalue> --state \x3Cvalue> --zip \x3Cvalue> --country "US"
# Insure a shipment
python3 {{baseDir}}/scripts/easypost.py create-insurance --shipment-id \x3Cvalue> --amount \x3Cvalue>
# Refund a label
python3 {{baseDir}}/scripts/easypost.py create-refund --carrier \x3Cvalue> --tracking-codes "comma-separated"
# List rates for shipment
python3 {{baseDir}}/scripts/easypost.py list-rates \x3Cid>
# Create return shipment
python3 {{baseDir}}/scripts/easypost.py create-return --from "JSON" --to "JSON" --parcel "JSON" --is-return "true"
Output Format
All commands output JSON by default.
Script Reference
| Script | Description |
|---|---|
{baseDir}/scripts/easypost.py |
Main CLI — all commands in one tool |
Credits
Built by M. Abidi | agxntsix.ai YouTube | GitHub Part of the AgxntSix Skill Suite for OpenClaw agents.
📅 Need help setting up OpenClaw for your business? Book a free consultation
安全使用建议
This skill is largely consistent with an EasyPost CLI, but inspect and test before trusting it with real credentials. Specific things to consider: (1) The script will try to read EASYPOST_API_KEY from a .env file in WORKSPACE or ~/.openclaw/workspace if the env var is absent — check whether you have a .env there and what it contains, or explicitly set EASYPOST_API_KEY to avoid that fallback. (2) The CLI code contains argument name mismatches/bugs (e.g., functions expect args named 'from' but the parser sets dest='from_addr'), so some commands may not work as written — validate functionality in a safe environment. (3) The script only communicates with api.easypost.com, and does not contact other external endpoints, but you should still review the code locally and run it with a test API key or in a sandbox before using production credentials.
功能分析
Type: OpenClaw Skill
Name: easypost
Version: 1.0.0
The skill is classified as suspicious due to a potential vulnerability in the `get_env` function within `scripts/easypost.py`. This function attempts to read the `EASYPOST_API_KEY` from a `.env` file located in the `WORKSPACE` directory (or `~/.openclaw/workspace`). If an attacker could manipulate the `WORKSPACE` environment variable, they might be able to direct the script to read a `.env` file from an arbitrary, unintended location, potentially leading to information disclosure. While the script's stated purpose is legitimate EasyPost API interaction and there's no clear evidence of intentional malicious exfiltration or arbitrary code execution, this file access pattern based on an environment variable presents a vulnerability that could be exploited in a compromised agent environment.
能力评估
Purpose & Capability
Name and description match the implemented functionality. The only required credential is EASYPOST_API_KEY and the script performs shipping, tracking, address verification, insurance, and refunds against https://api.easypost.com/v2 which aligns with the stated purpose.
Instruction Scope
SKILL.md instructs running the included CLI and only documents EASYPOST_API_KEY, but the script will also attempt to read a .env file from a WORKSPACE path (or ~/.openclaw/workspace/.env) if the env var is not set. That fallback behavior is not documented and means the tool will read files from the user's workspace without explicit mention.
Install Mechanism
Instruction-only skill with a bundled Python script; there is no install step or external download. No packages or arbitrary URLs are fetched or executed at install time.
Credentials
Declared required credential is a single EASYPOST_API_KEY (expected). However the script also reads the WORKSPACE environment variable (not declared) and will parse a .env file there to find the API key as a fallback. That implicit access to a workspace file could expose other local secrets if users rely on shared .env files; the skill does not declare or document this behavior.
Persistence & Privilege
Skill does not request persistent/always-on privileges, does not modify other skills or system-wide settings, and defaults for autonomous invocation are normal.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install easypost - 安装完成后，直接呼叫该 Skill 的名称或使用
/easypost触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release of the easypost skill.
- Provides shipping label creation, rate comparison, package tracking, address verification, and insurance via EasyPost.
- CLI tool for managing shipments, trackers, refunds, and rates.
- Outputs results in JSON format.
- No external dependencies; requires only Python 3.10+ and an EASYPOST_API_KEY.
- Full command list and usage examples included.
元数据
常见问题
Easypost 是什么？
EasyPost — shipping labels, rate comparison, package tracking, address verification, and insurance. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 383 次。
如何安装 Easypost？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install easypost」即可一键安装，无需额外配置。
Easypost 是免费的吗？
是的，Easypost 完全免费（开源免费），可自由下载、安装和使用。
Easypost 支持哪些平台？
Easypost 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Easypost？
由 aiwithabidi（@aiwithabidi）开发并维护，当前版本 v1.0.0。
推荐 Skills