ZappushZappush
SkillsUse CasesBenchmarkCommunitySign In
      Back to Skills
      meituan-skillhub

      Safety Report

      官方美团红包助手

      @meituan-skillhub

      【美团官方】美团红包助手,支持外卖、餐饮团购、酒店住宿、门票度假、休闲娱乐、闪购、医药等多品类优惠券/红包/神券的一键领取与历史领取记录查询。核心能力:1)一键领券,覆盖上述多品类场景,领取秒到账;2)查询历史红包领取记录,查看已领红包状态和有效期;3)内置美团官方账号认证,登录即可领券。重要说明:如存在多个美团...

      54Downloads
      0Installs
      0Stars
      1Versions

      Security Analysis

      medium confidence
      Suspicious

      This coupon helper is purpose-aligned, but it needs review because it handles Meituan login tokens, stores them in shared local cache, exposes a token in command arguments, and claims official status without clear provenance.

      May 7, 202614 files5 concerns
      Purpose & Capabilityconcern

      The coupon-claiming purpose is coherent, but the artifacts also require SMS login, user_token/device_token handling, and third-party account mutation while the registry declares no primary credential and the official branding is not backed by source or homepage metadata.

      Instruction Scopeconcern

      SKILL.md uses high-priority output-control rules, suppresses execution details, and encourages direct coupon issuance on broad discount intents, which can reduce user visibility into sensitive actions.

      Install Mechanismconcern

      Although there is no install spec and no required binaries are declared, bundled scripts invoke Python helpers and the CLIGuard helper invokes Node and can prefer code from a home-directory update path.

      Credentialsconcern

      The skill writes persistent files under user home/workspace locations, creates or uses shared cache directories, and sends account tokens to service APIs; this is more environment access than the registry metadata makes clear.

      Persistence & Privilegeconcern

      Authentication tokens and device tokens are persisted in a cross-skill shared cache, and the bundled CLIGuard helper contains a detached daemon launcher/update mechanism that should be explicitly reviewed.

      Guidance

      Only install this if you can verify the publisher is genuinely trusted by Meituan. Do not enter a phone number, SMS code, or login token unless you accept that the skill may store Meituan session data locally and use it to claim coupons. Prefer running it in a sandbox, review or disable the CLIGuard update/daemon behavior, and clear the shared token cache when you are done.

      Latest Release

      v1.0.0

      meituan-coupons v1.0.0 - Initial release: 美团官方红包助手上线,支持美团多品类(外卖、餐饮、酒店、门票、闪购、医药等)优惠券/红包/神券一键领取及历史记录查询。 - 内置美团账号认证,用户登录后即可领取红包。 - 严格遵循官方发券及查询流程,确保安全和合规。 - 支持多平台环境自动适配与时区精准处理。 - 明确触发场景与全流程规范,实现“一键领券”和便捷查询。

      Popular Skills

      meituan-travel

      @meituan-travel-ai · 2 stars

      美团出行红包

      @meituan-open-platform · 1 stars

      美团红包助手

      @meituan-openplatform · 0 stars

      美团优惠领取工具

      @meituan-zhengchang · 0 stars

      meituan-union-coupon-skill

      @meituan-union · 0 stars

      美团外卖

      @meituan-openplatform · 0 stars

      Published by @meituan-skillhub on ClawHub

      Zappush© 2026 Zappush
      HomeGuaranteeSupport

      Something feels unusual? We want to help: [email protected]