track17
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a Python helper script to manage parcel data and interact with the 17TRACK API. All commands are local and performed within the workspace context.
- [EXTERNAL_DOWNLOADS]: The script downloads carrier identification data from
https://res.17track.net. This is a legitimate resource provided by 17TRACK and is necessary for the skill's operation. - [CREDENTIALS_UNSAFE]: The skill requires a 17TRACK API token. It is designed to read this from environment variables rather than hardcoded strings, and includes explicit instructions to the AI agent to avoid echoing the token in responses.
- [DATA_EXFILTRATION]: Network communication is limited to official 17TRACK API endpoints for parcel tracking purposes. No suspicious or unauthorized data transfers were identified.
Audit Metadata