by 安全扫描
OpenClaw
安全
high confidenceThe skill's requirements and runtime instructions are consistent with an Easyship API integration: it only requests an Easyship API token and provides shipping/tracking/pickup operations against mcp.easyship.com with no installs or unrelated accesses.
评估建议
This skill appears to do exactly what it says: call Easyship's MCP API using the EASYSHIP_API_ACCESS_TOKEN. Before installing, ensure the token you provide has the minimum necessary permissions, rotate/revoke it if compromised, and avoid sharing it elsewhere. Confirm you're comfortable with the skill transmitting shipment and address data to mcp.easyship.com (the documented endpoint). Because it can be invoked autonomously by the agent, review activity logs and only enable the skill for agents/a...详细分析 ▾
✓ 用途与能力
Name/description (Easyship integration) align with required items: only EASYSHIP_API_ACCESS_TOKEN is requested and the SKILL.md describes shipping, tracking, pickups, billing, address validation, and analytics against mcp.easyship.com.
✓ 指令范围
SKILL.md instructions stay within shipping domain (rates, shipments, labels, pickups, analytics). It does not instruct reading local files, other environment variables, or sending data to endpoints outside the documented Easyship MCP server.
✓ 安装机制
No install spec and no code files — instruction-only skill. This is the lowest-risk install model (nothing is downloaded or written during install).
✓ 凭证需求
Only one env var (EASYSHIP_API_ACCESS_TOKEN) is required and it is the declared primary credential — proportionate for an API integration. SKILL.md does not reference additional secrets or unrelated credentials.
✓ 持久化与权限
always is false and the skill does not request elevated/system-wide presence or modification of other skills. Normal autonomous invocation is allowed (default) but does not combine with other risky privileges.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv0.1.72026/3/30
- Added the new create_label tool for buying labels for existing shipments (now 25 total tools). - Updated documentation to describe create_label usage as the preferred method for buying labels post-shipment creation. - Minor clarifications on tool descriptions and workflows. - No functional code changes detected.
● 无害
安装命令
点击复制官方npx clawhub@latest install easyship-official
镜像加速npx clawhub@latest install easyship-official --registry https://cn.longxiaskill.com