← 返回 Skills 市场
1846
总下载
2
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install post-at
功能描述
Manage Austrian Post (post.at) deliveries - list packages, check delivery status, set delivery place preferences.
安全使用建议
Before installing or running this skill, consider the following:
- Verify the source: check the referenced GitHub repo (https://github.com/krausefx/post-at-cli). Inspect the code and README to confirm the CLI's install method, published package name, and whether releases/tarballs are signed.
- Do not hand over credentials blindly: the SKILL.md requires POST_AT_USERNAME and POST_AT_PASSWORD. Only provide credentials to a CLI you have inspected and installed yourself from a trusted release. Prefer passing credentials interactively or via a secure vault rather than embedding them in long-lived environment variables if possible.
- Installation caution: the registry entry provides no install spec. If you must install the CLI, obtain it directly from the official repo or a verified package registry (and verify checksums). Avoid running arbitrary install scripts or downloading binaries from unknown URLs.
- Session storage: the CLI mentions caching short-lived session tokens. Review where and how tokens/sessions are stored on disk before using the tool on multi-user or shared machines.
- If you only need occasional checks, consider running the CLI locally on your machine rather than giving an autonomous agent access to your credentials.
The inconsistencies in metadata vs. SKILL.md (missing declared env vars and install instructions) suggest sloppy packaging rather than explicit malice, but they do increase risk—inspect the upstream code and install source before providing credentials or integrating the skill into autonomous workflows.
功能分析
Type: OpenClaw Skill
Name: post-at
Version: 0.1.0
The skill bundle is benign. The `SKILL.md` clearly describes an unofficial CLI tool for managing Austrian Post deliveries, requiring `POST_AT_USERNAME` and `POST_AT_PASSWORD` via environment variables or CLI options, which is a standard and transparent method for handling credentials. All demonstrated commands are directly related to the stated purpose (listing deliveries, checking status, setting preferences). There is no evidence of prompt injection attempts against the agent, data exfiltration, malicious execution, persistence, or obfuscation. The skill's behavior is fully aligned with its stated purpose.
能力评估
Purpose & Capability
The SKILL.md describes an unofficial CLI that logs into post.at and manages deliveries — requiring a post.at username/password — which is coherent with the stated purpose. However the registry metadata lists no required env vars or binaries while the SKILL.md explicitly expects POST_AT_USERNAME/POST_AT_PASSWORD and mentions node in its metadata, creating an inconsistency between claimed requirements and the runtime instructions.
Instruction Scope
The instructions are narrowly scoped to using a post-at CLI to list deliveries, get details, and set delivery-place preferences. They do not instruct the agent to read unrelated system files or exfiltrate data to third-party endpoints; the only external interaction implied is with post.at (the service the skill integrates with).
Install Mechanism
This is an instruction-only skill with no install spec or code files. SKILL.md metadata references node (implying a Node CLI), but there are no install steps provided. That means the skill itself won't write code to disk, but a user must separately obtain/install the post-at CLI (from the GitHub repo). The lack of an explicit install source or verified release instructions increases risk if the user installs an untrusted binary.
Credentials
SKILL.md requires POST_AT_USERNAME and POST_AT_PASSWORD (or CLI options) to log into post.at, which is proportionate to the task. The concern is that the registry metadata and the skill manifest declare no required env vars or primary credential, so the declared surface does not match what the runtime instructions actually need — this mismatch could lead a user to unknowingly supply credentials to an unvetted CLI.
Persistence & Privilege
The skill does not request always:true and has no install/persistence behavior declared. It does mention caching short-lived session tokens (typical for a CLI), but there is no indication that the skill will install persistent system-wide components or modify other skills' config.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install post-at - 安装完成后，直接呼叫该 Skill 的名称或使用
/post-at触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.0
Initial release of the post-at CLI.
- Manage Austrian Post (post.at) deliveries: list, filter, and view details of packages.
- Set delivery place preferences (Wunschplatz) using custom or preset options.
- Supports login via environment variables or CLI options.
- Outputs delivery information in human-readable or JSON format.
- Includes command references and workflow examples for scripting and automation.
元数据
常见问题
Post.at Tracking 是什么？
Manage Austrian Post (post.at) deliveries - list packages, check delivery status, set delivery place preferences. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 1846 次。
如何安装 Post.at Tracking？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install post-at」即可一键安装，无需额外配置。
Post.at Tracking 是免费的吗？
是的，Post.at Tracking 完全免费（开源免费），可自由下载、安装和使用。
Post.at Tracking 支持哪些平台？
Post.at Tracking 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Post.at Tracking？
由 KrauseFx（@krausefx）开发并维护，当前版本 v0.1.0。
推荐 Skills