← 返回 Skills 市场
349
总下载
0
收藏
0
当前安装
3
版本数
在 OpenClaw 中安装
/install sf-express
功能描述
Use SF Express (顺丰速运) for shipment tracking, shipping guidance, service-type comparison, outlet lookup, and delivery-time or fee estimation. Use when the use...
安全使用建议
This skill appears to do what it claims: local tracking, estimates and local persistence for history/subscriptions/addresses. Before installing: (1) Review the code (already included) if you plan to store sensitive addresses or phone numbers. (2) Note the skill creates ~/.openclaw/data/sf-express/ and a secure/ directory with a .key file (mode 600) — verify you are comfortable with local storage. (3) The encryption implementation contains a likely bug in key derivation/usage which may undermine encryption or cause the skill to fail; ask the author to fix key handling (Fernet expects a urlsafe_b64encoded 32-byte key). (4) Install dependencies in an isolated Python virtualenv and test in a sandbox before giving it real PII. (5) If you need stronger guarantees, request that the maintainer document the encryption design or remove local storage of sensitive fields. If you want, I can point to the exact lines/changes to fix the key handling and harden storage behavior.
功能分析
Type: OpenClaw Skill
Name: sf-express
Version: 1.0.2
The sf-express skill bundle is a legitimate tool for tracking shipments and estimating delivery fees. It includes a dedicated security module (security.py) for encrypted local storage of history and subscriptions using the cryptography library, and it provides clear privacy controls for users to inspect or clear their data. The main logic in sfexpress.py uses standard libraries and follows the stated purpose without any signs of data exfiltration, malicious execution, or prompt injection.
能力评估
Purpose & Capability
Name/description match the included code: tracking, estimates, history, subscriptions, address storage and privacy controls. No unrelated environment variables, binaries, or external cloud credentials are requested.
Instruction Scope
SKILL.md describes only SF Express workflows and explicitly documents local persistence and privacy commands. The runtime files operate on ~/.openclaw/data/sf-express and do not reference other system-wide config or unrelated paths in the shown code.
Install Mechanism
This is an instruction/code bundle with no install spec; dependencies are listed in requirements.txt (aiohttp, cryptography, etc.). No external download URLs or archive extraction are present. Installing the Python dependencies via pip is the expected mechanism.
Credentials
The skill requests no env vars or external tokens (proportionate). It does persist user data (query history, subscriptions, addresses) on disk and stores a local key file at ~/.openclaw/data/sf-express/secure/.key (mode 600). Storing address/phone data is sensitive — the persistence is reasonable for the stated functionality but users should be aware. Also, the local encryption implementation has a suspicious/incorrect key handling pattern (PBKDF2 used with random inputs and base64 encode/decode steps) that likely breaks or weakens encryption; this is an implementation bug rather than an indication of malicious intent, but it affects the privacy guarantees.
Persistence & Privilege
The skill persists data under the user's home directory and provides privacy commands to inspect/clear/export that data. always:false (no forced global presence). Persisting subscriptions/history/addresses is appropriate for the feature set, but because the skill stores potentially sensitive PII and a local key file, you should review or audit the storage and encryption behavior before storing secrets.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install sf-express - 安装完成后，直接呼叫该 Skill 的名称或使用
/sf-express触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.2
English-first documentation update
v1.0.1
Document local persistence paths and privacy controls; reduce eager secure-storage creation; make privacy clear remove local SQLite and encrypted files.
v1.0.0
Initial release of the sf-express skill:
- Enables shipment tracking, shipping guidance, service-type comparison, outlet lookup, and delivery/fee estimation for SF Express (顺丰速运).
- Designed to help users with tracking numbers, fee/time estimates, finding outlets, and shipment preparation.
- Prompts only for essential information, gives practical answers, and clarifies assumptions when necessary.
- Does not claim to perform real shipping actions unless confirmed as supported.
元数据
常见问题
sf-express 是什么？
Use SF Express (顺丰速运) for shipment tracking, shipping guidance, service-type comparison, outlet lookup, and delivery-time or fee estimation. Use when the use... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 349 次。
如何安装 sf-express？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install sf-express」即可一键安装，无需额外配置。
sf-express 是免费的吗？
是的，sf-express 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
sf-express 支持哪些平台？
sf-express 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 sf-express？
由 haidong（@harrylabsj）开发并维护，当前版本 v1.0.2。
推荐 Skills