Obtain Coupons All In One 全平台优惠券助手-外卖、快递、出行、电影票一站式获取

PassAudited by ClawScan on May 1, 2026.

Overview

This skill appears to be a straightforward coupon fetcher, but users should treat its returned links and QR codes as third-party promotional links and verify them before opening or scanning.

This skill is reasonable for finding coupons, but treat its coupon links and QR codes like any other third-party promotional links. Verify the destination before opening or scanning, and review any fallback skill separately before installing it.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The skill may contact an external service to retrieve coupon data and then show links or codes from that service.

Why it was flagged

The helper code performs unauthenticated GET requests to an external coupon API. This is disclosed and central to the coupon-fetching purpose, but it means results depend on a third-party service.

Skill content
API_BASE_URL = "https://agskills.moontai.top" ... response = self.session.get(url, timeout=10)
Recommendation

Use the skill for coupon lookup only, and verify any destination before entering personal, payment, or account information.

What this means

A user could be encouraged to open a promotional link or scan a QR code returned by the remote API.

Why it was flagged

The skill tells the agent to present returned coupon URLs, QR-code image URLs, and coupon codes exactly, and suggests opening or scanning them in WeChat. This is expected for coupon redemption, but users may over-trust third-party links or QR codes.

Skill content
coupon_url和coupon_qrcode_img_url建议在微信中打开/扫码;coupon_code必须原样呈现
Recommendation

Before opening links or scanning QR codes, check that the destination looks legitimate and avoid providing sensitive account or payment details unless you are sure you are on the intended platform.

What this means

If the API fails, the user may be directed to install another coupon-related skill that should be reviewed separately.

Why it was flagged

The skill may recommend separate fallback skills if the main API is unavailable. This is disclosed and purpose-aligned, but installing additional skills expands the trust boundary.

Skill content
当主要API接口不可用时,skill会自动提供备用技能建议,引导用户安装并使用对应的独立技能。
Recommendation

Do not install fallback skills automatically; review each suggested skill’s permissions, source, and behavior before installing.