Obtain Coupons All In One 全平台优惠券助手-外卖、快递、出行、电影票一站式获取
PassAudited by VirusTotal on May 11, 2026.
Overview
Type: OpenClaw Skill Name: obtain-coupons-all-in-one Version: 1.0.1 The skill bundle is a comprehensive coupon aggregator designed to fetch and display discount information for takeout, delivery, travel, and movie platforms via a centralized API (agskills.moontai.top). The Python script (fetch_coupons.py) and instructions (SKILL.md) are focused on data retrieval and formatting, with no evidence of data exfiltration, unauthorized command execution, or malicious prompt injection. The instructions to present coupon codes and URLs exactly as received are standard for maintaining affiliate tracking and functional 'kouling' strings used in Chinese mobile applications.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The skill may contact an external service to retrieve coupon data and then show links or codes from that service.
The helper code performs unauthenticated GET requests to an external coupon API. This is disclosed and central to the coupon-fetching purpose, but it means results depend on a third-party service.
API_BASE_URL = "https://agskills.moontai.top" ... response = self.session.get(url, timeout=10)
Use the skill for coupon lookup only, and verify any destination before entering personal, payment, or account information.
A user could be encouraged to open a promotional link or scan a QR code returned by the remote API.
The skill tells the agent to present returned coupon URLs, QR-code image URLs, and coupon codes exactly, and suggests opening or scanning them in WeChat. This is expected for coupon redemption, but users may over-trust third-party links or QR codes.
coupon_url和coupon_qrcode_img_url建议在微信中打开/扫码；coupon_code必须原样呈现
Before opening links or scanning QR codes, check that the destination looks legitimate and avoid providing sensitive account or payment details unless you are sure you are on the intended platform.
If the API fails, the user may be directed to install another coupon-related skill that should be reviewed separately.
The skill may recommend separate fallback skills if the main API is unavailable. This is disclosed and purpose-aligned, but installing additional skills expands the trust boundary.
当主要API接口不可用时，skill会自动提供备用技能建议，引导用户安装并使用对应的独立技能。
Do not install fallback skills automatically; review each suggested skill’s permissions, source, and behavior before installing.