← 返回 Skills 市场
Parcel Package Tracking
作者
Gustavo Madeira Santana
· GitHub ↗
· v1.0.0
2223
总下载
1
收藏
8
当前安装
1
版本数
在 OpenClaw 中安装
/install parcel-package-tracking
功能描述
Track and add deliveries via Parcel API.
安全使用建议
Do not install blindly. The SKILL.md says the skill needs PARCEL_API_KEY and runs a Node script, but the registry metadata does not declare those requirements (no env vars, no required binaries). Ask the publisher to explain and update the metadata. Before installing, review the parcel-api.js source to confirm it only talks to Parcel's API and doesn't read other files or send data elsewhere. Ensure Node is available in a controlled environment, store your PARCEL_API_KEY securely (least privilege), and consider running the skill in a sandbox or with limited network access if you cannot verify the code.
功能分析
Type: OpenClaw Skill
Name: parcel-package-tracking
Version: 1.0.0
The skill bundle is benign. It provides a client for the Parcel API, requiring a `PARCEL_API_KEY` environment variable for authentication, as explicitly stated in `SKILL.md`. The `parcel-api.js` script makes legitimate HTTPS requests to `api.parcel.app` for tracking, adding deliveries, and listing carriers. There is no evidence of prompt injection, data exfiltration, malicious execution, persistence, or obfuscation. All actions are clearly aligned with the stated purpose of interacting with the Parcel app.
能力评估
Purpose & Capability
The skill's stated purpose (track and add deliveries via Parcel API) matches the SKILL.md which requests a PARCEL_API_KEY and shows calls to a parcel-api.js script. However the registry metadata does not declare the PARCEL_API_KEY requirement (metadata lists no required env vars), which is an inconsistency.
Instruction Scope
SKILL.md instructs only to call the included Node script to list/add deliveries and to set PARCEL_API_KEY. It does not instruct the agent to read unrelated files or exfiltrate data to unexpected endpoints. The instructions do reference a specific path (~/.clawdbot/skills/parcel/parcel-api.js) and the Parcel web site for the API key, which is consistent with the described functionality.
Install Mechanism
There is no install spec (instruction-only), which is low risk. However the skill includes a code file (parcel-api.js) that will be executed via 'node' according to SKILL.md. The registry's 'required binaries' list claims none, so the SKILL.md's reliance on the Node runtime is not reflected in metadata — another inconsistency to address.
Credentials
SKILL.md requires a PARCEL_API_KEY environment variable (appropriate for accessing Parcel's API), but the published metadata does not list any required env vars. This could lead to the skill having access to a credential that the registry metadata doesn't advertise. The single API key itself is proportionate to the stated purpose, but the metadata mismatch is concerning.
Persistence & Privilege
The skill does not set always:true and does not disable model invocation, so it can be invoked by the model when eligible (default behavior). This is typical for integration skills; nothing here indicates excessive persistent privileges.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install parcel-package-tracking - 安装完成后，直接呼叫该 Skill 的名称或使用
/parcel-package-tracking触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release of the Parcel package tracking skill.
- Track deliveries and add new packages via the Parcel API.
- Supports listing deliveries (recent, active), adding packages, and searching carriers.
- Requires configuration with PARCEL_API_KEY.
元数据
常见问题
Parcel Package Tracking 是什么？
Track and add deliveries via Parcel API. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 2223 次。
如何安装 Parcel Package Tracking？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install parcel-package-tracking」即可一键安装，无需额外配置。
Parcel Package Tracking 是免费的吗？
是的，Parcel Package Tracking 完全免费（开源免费），可自由下载、安装和使用。
Parcel Package Tracking 支持哪些平台？
Parcel Package Tracking 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Parcel Package Tracking？
由 Gustavo Madeira Santana（@gumadeiras）开发并维护，当前版本 v1.0.0。
推荐 Skills