Rakuten返利助手

Rakuten（原Ebates）美国最大购物返利平台工具，覆盖3500+海外商家，提供购物现金返利和优惠券查找。

Security Scan

The skill's declared purpose (Rakuten cashback helper) matches its minimal runtime footprint: it's an instruction-only description with no installs, credentials, or unusual requests, though the SKILL.md is high-level and lacks implementation details.

Purpose & Capability

Name and description match a cashback/discount lookup tool and the skill declares no binaries, credentials, or installs — this is proportionate. Note: the SKILL.md mentions features like a browser plugin and automatic site detection, but the skill package contains no code or install to implement those features (it's purely instructional/spec). That mismatch is a functionality gap, not a security inconsistency.

Instruction Scope

The SKILL.md only provides a high-level feature list and an output format; it does not instruct the agent to read local files, access credentials, or call specific external endpoints. However it is vague about data sources and runtime behavior (e.g., how to obtain current cashback rates), which could lead an agent to perform web browsing or web scraping if implemented — the instructions give broad discretion but do not request unrelated system access.

Install Mechanism

No install spec and no code files are present, so nothing is written to disk or fetched during install. This is low-risk from an installation perspective.

Credentials

The skill declares no required environment variables, credentials, or config paths. Its mention of PayPal/payouts is informational only and not accompanied by requests for payout credentials — this is proportionate.

Persistence & Privilege

always is false and defaults apply. The skill can be invoked by the agent normally; there are no elevated persistence or cross-skill configuration changes requested.

Assessment

This skill is essentially a descriptive, instruction-only helper with no code, installs, or credential requests — that makes it low-risk but also means it currently has no concrete implementation. Before installing/use: (1) be aware the SKILL.md is vague about data sources; an agent using it may attempt web searches or scraping to find cashback rates, which is normal but could access external sites. (2) Because the publisher and homepage are unknown, prefer enabling it only for explicit user-invoked sessions rather than broad autonomous access, and monitor any future updates that add installs or request PayPal/other credentials. (3) If you expect browser-plugin-style automatic detection, note that this package provides no extension or integration — such functionality would require additional code or a browser extension and should be treated separately.

Rakuten（原Ebates）购物返利工具。作为美国最大的Cashback返利平台（乐天集团旗下），覆盖Amazon、Walmart、Target等3500+海外商家，为用户提供购物现金返利和优惠券服务。

触发词

rakuten、rakuten返利、ebates、乐天返利、美国返利、海外购物返利、rakuten cashback

计划实现能力

• 3500+商家覆盖：Amazon/Walmart/Target/Macy's等主流海外商家
• 现金返利：购物直接返现金，通过PayPal或支票提现
• 浏览器插件：自动检测当前网站是否有返利
• 双倍返利活动：追踪Double Cashback活动信息

输出格式

🟡 Rakuten返利查询

商家：[商家名称]
当前返利：[X]% Cash Back
特别活动：[双倍返利/无]
可用优惠码：[优惠码]
链接：[返利链接]