Security audit
蘭(Lann)泰式按摩预约技能
Security checks across malware telemetry and agentic risk
Overview
The skill's files, instructions, and requested resources are consistent with a booking/lookup assistant for Lann Thai Massage and do not request unrelated credentials or perform unexplained actions.
This package appears coherent for a booking skill. Before installing or running scripts: 1) Verify you trust the API host (https://open.lannlife.com) since test scripts/post requests contact it; 2) avoid running the install branch of start_mcp.sh unless you obtain lann-mcp-server from a trusted source; 3) when running tests, do not use real personal phone numbers if you don't want them sent to the remote API; and 4) if you require stronger guarantees, request the upstream repository URL or contact the publisher to confirm the official service endpoints and privacy practices.
VirusTotal
66/66 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.