Spx Tracking

Query SPX Express shipment tracking by tracking number. Call this skill when the user mentions a tracking number matching the SPX format (CNMY..., SPXMY...),...

This skill appears to do exactly what it claims: query the SPX public tracking API and format results. Before installing or using it: (1) Do not provide browser session cookies unless you understand the privacy implications — the script will forward any cookie you pass to spx.com.my. (2) If you want maximum privacy, run it without the --cookie flag; the public API typically supports unauthenticated reads. (3) The package auto-installs the Python requests library into a venv on first run — review or run in an isolated environment if you prefer. (4) The SKILL.md warns not to output raw API responses; if you rely on this skill, you may want to inspect or run the script locally to confirm it only returns the structured fields you expect.

Type: OpenClaw Skill Name: spx-tracking Version: 1.0.1 The skill bundle is a legitimate tool for tracking SPX Express (Shopee Express) shipments in Malaysia. The Python script `scripts/spx_tracking.py` queries a public SPX API endpoint and includes robust logic for parsing events and fixing text encoding issues (mojibake). While it accepts an optional `--cookie` argument for authenticated requests, the documentation in `SKILL.md` correctly identifies this as sensitive data and instructs the agent not to log or echo it. There is no evidence of data exfiltration, malicious execution, or prompt injection.