飞猪租车智能推荐助手

• Risk level: Low
• Analyzed: Apr 7, 2026, 11:56 AM
• Findings: 0
• Version: 1.0.0

Overview

The skill's files and runtime instructions are consistent with a Fliggy (飞猪) rental-car recommendation assistant and do not request unrelated credentials, installs, or system access.

This skill appears internally consistent for recommending Fliggy rental cars and doesn't ask for credentials or install code. Before enabling it: (1) review mtopapi/data.js to confirm it contains only static sample data and no hard-coded secrets; (2) be aware Mtop API calls typically require valid auth/context — the skill doesn't declare how to obtain tokens, so the agent or user may need to supply them at runtime (never paste credentials into an untrusted prompt); (3) verify the network endpoints used at runtime point to official Fliggy/Taobao domains; and (4) if the agent prompts for additional access (API keys, cookies, or system files) ask why those are needed and deny if unrelated.