mtpaotui

The stated purpose matches Meituan errand ordering, but the capability is high-impact: it authorizes a Meituan account, reads addresses/phones, previews fees, and can submit a real order.

The workflow includes useful safety gates such as preview-before-submit, explicit user confirmation, and extra confirmation over 100 yuan, but it also tells the agent to hide technical details from the user.

The package is instruction-only, but the instructions reference scripts and reference files that are not present in the manifest, so the implementation that would handle login, address data, and ordering is not reviewable.

Registry requirements declare no credentials or capability tags, while SKILL.md requires Meituan authorization, token checks, address-book access, and order submission.

The skill checks whether a Token is valid and polls authorization state, but the artifacts do not explain token storage, scope, revocation, or which account permissions are granted.