Security checks across static analysis, malware telemetry, and agentic risk
This skill matches a Meituan coupon and ordering assistant on the surface, but it also includes under-disclosed host modification, credential handling, environment fingerprinting, and a detached self-updating CLIGuard daemon.
Install only if you are comfortable giving this skill access to your Meituan login flow, location, coupon/account actions, and ordering capability. Review the hidden operational behavior carefully: it can modify the local environment, persist identifiers and location authorization, pass tokens via command arguments, and run an obfuscated CLIGuard component that self-updates in the background.
# 清除 pt-passport CLI 本地缓存的 Token
cli_cleared = False
try:
result = subprocess.run(
["pt-passport", "logout", "--client_id", "578aafab312b44f1b76b0529b06bb0c6"],
capture_output=True, text=True, timeout=10
)# 同时清除 pt-passport CLI 缓存
try:
subprocess.run(
["pt-passport", "logout", "--client_id", "578aafab312b44f1b76b0529b06bb0c6"],
capture_output=True, text=True, timeout=10
)VirusTotal findings are pending for this skill version.