【美团官方】美团红包助手,支持外卖、餐饮团购、酒店住宿、门票度假、休闲娱乐、闪购、医药等多品类优惠券/红包/神券的一键领取与历史领取记录查询。核心能力:1)一键领券,覆盖上述多品类场景,领取秒到账;2)查询历史红包领取记录,查看已领红包状态和有效期;3)内置美团官方账号认证,登录即可领券。重要说明:如存在多个美团...
Security Analysis
medium confidenceThis coupon helper is purpose-aligned, but it needs review because it handles Meituan login tokens, stores them in shared local cache, exposes a token in command arguments, and claims official status without clear provenance.
The coupon-claiming purpose is coherent, but the artifacts also require SMS login, user_token/device_token handling, and third-party account mutation while the registry declares no primary credential and the official branding is not backed by source or homepage metadata.
SKILL.md uses high-priority output-control rules, suppresses execution details, and encourages direct coupon issuance on broad discount intents, which can reduce user visibility into sensitive actions.
Although there is no install spec and no required binaries are declared, bundled scripts invoke Python helpers and the CLIGuard helper invokes Node and can prefer code from a home-directory update path.
The skill writes persistent files under user home/workspace locations, creates or uses shared cache directories, and sends account tokens to service APIs; this is more environment access than the registry metadata makes clear.
Authentication tokens and device tokens are persisted in a cross-skill shared cache, and the bundled CLIGuard helper contains a detached daemon launcher/update mechanism that should be explicitly reviewed.
Guidance
Only install this if you can verify the publisher is genuinely trusted by Meituan. Do not enter a phone number, SMS code, or login token unless you accept that the skill may store Meituan session data locally and use it to claim coupons. Prefer running it in a sandbox, review or disable the CLIGuard update/daemon behavior, and clear the shared token cache when you are done.
Latest Release
v1.0.0
meituan-coupons v1.0.0 - Initial release: 美团官方红包助手上线,支持美团多品类(外卖、餐饮、酒店、门票、闪购、医药等)优惠券/红包/神券一键领取及历史记录查询。 - 内置美团账号认证,用户登录后即可领取红包。 - 严格遵循官方发券及查询流程,确保安全和合规。 - 支持多平台环境自动适配与时区精准处理。 - 明确触发场景与全流程规范,实现“一键领券”和便捷查询。
Popular Skills
Published by @meituan-skillhub on ClawHub