Trip Coupon 出行优惠券隐藏券-支持滴滴出行、携程礼包(机票、酒店、门票)
PassAudited by ClawScan on May 1, 2026.
Overview
This skill mainly fetches public travel coupon links from a disclosed API, but users should notice that the links and QR codes come from third-party services and one reference file documents a different coupon API.
Install only if you want the agent to call the disclosed coupon API and display third-party coupon links or QR codes. Inspect links before opening them in WeChat or scanning QR codes, and prefer an updated version where the mismatched reference documentation is corrected.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A user may click or scan a coupon link chosen by the external coupon service, so they should verify the destination before redeeming.
The remote coupon API controls the links and QR image URLs that the agent presents to the user. This is expected for a coupon skill, but the artifacts do not describe destination validation or domain allowlisting.
严格原样呈现API返回的URL链接和二维码链接!
Keep this behavior user-directed, inspect links before opening or scanning them, and consider adding explicit expected domains or safety wording.
The agent could potentially show food-delivery coupon information instead of travel coupons if it relies on the mismatched reference file.
A referenced documentation file describes a takeout-coupon endpoint rather than the trip-coupon endpoint used by SKILL.md and the main script, which could confuse an agent that consults the reference.
接口地址 | `https://agskills.moontai.top/coupon/takeout` |
Update or remove the stale takeout-coupon reference so all artifacts consistently describe the trip-coupon workflow.
