小递查查-快递批量查询API技能

批量查询快递物流信息；当用户需要查询多个快递单号、获取物流状态或追踪包裹位置时使用

This skill appears to do what it says: it will send the tracking numbers (and optional phone-tail values) to the third‑party service hosted at xdccy.com and return results. Before installing or using it: (1) verify the xdccy.com service is trustworthy and that you want those tracking numbers sent to that provider; (2) avoid sharing highly sensitive personal data in the tracking list; (3) use least-privilege API keys (rotate or limit them) and do not reuse production credentials you need kept private; (4) ensure openpyxl is installed in a controlled environment; (5) if you need higher assurance, review the full script (the visible portions only call the xdccy API and generate local files) or run it in an isolated environment.

Type: OpenClaw Skill Name: skill-batchqueryexpress Version: 1.0.0 The skill bundle provides a legitimate tool for batch querying express tracking information using the 'xdccy.com' API. The core logic in `scripts/express_query.py` implements standard API communication, including request signing and support for multiple output formats (Excel, CSV, JSON) using the `openpyxl` and `requests` libraries. No evidence of data exfiltration, malicious execution, or prompt injection was found; the script only processes user-provided tracking numbers and credentials as described in `SKILL.md`.