Security audit
Security checks across malware telemetry and agentic risk
The skill partly fits a Meituan ordering assistant, but it also includes under-disclosed background updating, device fingerprinting, token/location persistence, and broad automatic triggers.
Review this skill carefully before installing. It may require Meituan account login and location access, can retain local auth/location/device state, and includes a background vendor component that can update and run code outside the packaged skill. Only use it if you trust the publisher and are comfortable with local device profiling and explicit confirmation before any order or payment action.
# 清除 pt-passport CLI 本地缓存的 Token
cli_cleared = False
try:
result = subprocess.run(
[PT_PASSPORT_BIN, "logout", "--client_id", "578aafab312b44f1b76b0529b06bb0c6"],
capture_output=True, text=True, timeout=10
)# 同时清除 pt-passport CLI 缓存
try:
subprocess.run(
[PT_PASSPORT_BIN, "logout", "--client_id", "578aafab312b44f1b76b0529b06bb0c6"],
capture_output=True, text=True, timeout=10
)if is_windows:
DETACHED_PROCESS = 0x00000008
CREATE_NEW_PROCESS_GROUP = 0x00000200
subprocess.Popen(
['node', _CLIGUARD_WRAPPER_PATH, '--start'],
stdout=subprocess.DEVNULL,
stderr=subprocess.DEVNULL,env=env,
)
else:
subprocess.Popen(
['node', _CLIGUARD_WRAPPER_PATH, '--start'],
stdout=subprocess.DEVNULL,
stderr=subprocess.DEVNULL,"const r=addCommonParams(" + json.dumps(url_str) + ");"
"console.log(r.url)"
)
result = subprocess.check_output(['node', '-e', js_code], timeout=5, stderr=subprocess.PIPE)
injected = result.decode('utf-8').strip()
return injected if injected else url_str
except Exception as e:f"const {{signRequest}}=require({json.dumps(_CLIGUARD_PATH)});"
f"console.log(JSON.stringify(signRequest({json.dumps(method.upper())},{json.dumps(url_str)},{json.dumps(body_hash)})))"
)
result = subprocess.check_output(
['node', '-e', js_code],
timeout=5,
stderr=subprocess.PIPE,f"const {{signRequest}}=require({json.dumps(_CLIGUARD_PATH)});"
f"console.log(JSON.stringify(signRequest({json.dumps(method.upper())},{json.dumps(url_str)},{json.dumps(body_hash)})))"
)
result = subprocess.check_output(
['node', '-e', js_code],
timeout=5,
stderr=subprocess.PIPE,65/65 vendors flagged this skill as clean.
Detected: suspicious.dangerous_exec, suspicious.secret_argv_exposure