美团出行红包

• Analyzed: May 10, 2026, 7:26 PM
• Findings: 1
• Version: 1.0.0
• Hash: cb1a8030b7e4fe9a06555198624d741a9f061960a388f5fd8377a70bc3dd9e56
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill facilitates Meituan coupon collection by handling sensitive user authentication tokens (SMS login) and setting up automated persistence via cron jobs. It utilizes a local CLI helper (skill_cache_cli.py) for file and credential management, and communicates with Meituan APIs (peppermall.meituan.com). While the instructions in SKILL.md emphasize privacy and the behavior aligns with the stated purpose, the high-risk capabilities—including credential storage, shell execution for local data management, and automated task scheduling—represent a significant attack surface. No evidence of intentional malice was found, but the broad permissions and sensitive data handling warrant caution.