meituan-coupon-order-assistant@1.0.2
CAUTION· static onlyPublisher claims: "美团优惠下单助手。当你想吃饭、找餐厅、买团购券、喝咖啡、喝奶茶、找饮品、吃快餐、吃火锅、吃烧烤、吃日料、吃川菜、吃自助餐、找下午茶、附近有什么好吃的好喝的，只需告诉我想吃什么喝什么或在哪附近找，我会自动帮你领券、搜索商品、展示图文列表，选好后直接帮你下单。我也可以单独帮你领优惠券、领券、领红包、领神券、领专属红包..." Observed in sandbox: static analysis only — behavior not yet observed.
Registry ClawHubPublisher meituan-union · publishing for 158 daysInstalls 1,199Last detonated 20 h ago
Coverage
Static only; nothing was run yet.The label rests on the code, the instruction files and the publisher. The honeypot run replaces this verdict when it completes.
Is [email protected] safe to install?
KillerSkills analysed it statically (a sandbox run is pending) on 2026-11-13 and scored it 64/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Summary: static analysis only — behavior not yet observed.
Behavior trace
Queued for honeypot run · static analysis onlyt+CategoryObserved action
This version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.
Static findings
MEDIUM
Unicode escape sequence detectedscripts/run.js:695 · Unicode escape sequence detected — may contain obfuscated payloads
AST07out({ ok: false, error: 'RATE_LIMIT', message: '\u8bf7\u6c42\u8fc7\u4e8e\u9891\u7e41\uff0c\u8bf7\u7a0d\u540e\u91cd\u8bd5' });Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.MEDIUM
Python subprocess execution detectedscripts/vendor/cliguard/__init__.py:187 · Python subprocess execution detected
AST05subprocess.Popen(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Python subprocess execution detectedscripts/vendor/cliguard/__init__.py:220 · Python subprocess execution detected
AST05result = subprocess.check_output(['node', '-e', js_code], timeout=5, stderr=subprocess.PIPE)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Python subprocess execution detectedscripts/vendor/cliguard/__init__.py:299 · Python subprocess execution detected
AST05result = subprocess.check_output(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Python subprocess execution detectedscripts/auth.py:119 · Python subprocess execution detected
AST05result = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Unicode escape sequence detectedscripts/run.js:706 · Unicode escape sequence detected — may contain obfuscated payloads
AST07out({ ok: false, error: 'TIMEOUT', message: '\u8bf7\u6c42\u8d85\u65f6\uff0c\u8bf7\u7a0d\u540e\u91cd\u8bd5' });Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.MEDIUM
Python subprocess execution detectedscripts/auth.py:153 · Python subprocess execution detected
AST05subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Unicode escape sequence detectedscripts/run.js:692 · Unicode escape sequence detected — may contain obfuscated payloads
AST07out({ ok: false, error: 'RE_LOGIN', message: '\u767b\u5f55\u5df2\u8fc7\u671f\uff0c\u8bf7\u91cd\u65b0\u767b\u5f55' });Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.MEDIUM
Unicode escape sequence detectedscripts/run.js:698 · Unicode escape sequence detected — may contain obfuscated payloads
AST07out({ ok: false, error: 'SYSTEM_ERROR', message: '\u7cfb\u7edf\u5f02\u5e38\uff0c\u8bf7\u7a0d\u540e\u91cd\u8bd5' });Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.MEDIUM
Python subprocess execution detectedscripts/vendor/cliguard/__init__.py:458 · Python subprocess execution detected
AST05result = subprocess.check_output(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Unicode escape sequence detectedscripts/run.js:688 · Unicode escape sequence detected — may contain obfuscated payloads
AST07message: '\u60a8\u4eca\u5929\u5df2\u7ecf\u9886\u53d6\u8fc7\u4e86\uff0c\u6bcf\u5929\u53ea\u80fd\u9886\u53d6\u4e00\u6b21\uff0c\u660e\u5929\u518d\u6765\u54e6\uff5e'Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.MEDIUM
Python subprocess execution detectedscripts/vendor/cliguard/__init__.py:196 · Python subprocess execution detected
AST05subprocess.Popen(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.Cost to the agent
Instructions loaded
≈4,254 tok
1 file · 15 in bundle
Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.
Known vulnerabilities
Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.
What would make this Verified
16 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%- Unclaimed publisher≈ +8 on the totalClaim meituan-union: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
- Unicode escape sequence detected≈ +2 on the totalPut hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
- Python subprocess execution detected≈ +2 on the totalBuild commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
Publish a new version to ClawHub, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim meituan-unionPropose a patch to the maintainer