Taopiaopiao

Provides summaries of movie showtimes, prices, ratings, and basic info from Taopiaopiao's public pages without booking or bulk scraping capabilities.

Security Scan

The skill's declared purpose (summarizing public Taopiaopiao pages) matches its instructions and it requests no installs, credentials, or config access; nothing here is disproportionate or clearly malicious.

Purpose & Capability

Name/description match the SKILL.md: it describes extracting showtimes, prices, ratings and basic info from public movie/venue pages and the skill requests no credentials or unrelated binaries. Requested capabilities are proportional to the stated purpose.

Instruction Scope

SKILL.md is high-level and stays within scope (public page extraction, no booking, no bulk scraping). It recommends opening dynamic pages manually before parsing, which limits automated scraping. However the runtime instructions are vague about the exact scraping mechanism (agent fetch vs. user-provided page), so operational behavior depends on the integrating agent's web-access policies and should be clarified to avoid unintended automated crawling.

Install Mechanism

No install spec and no code files — instruction-only. This minimizes on-disk risk because nothing will be downloaded or executed by the skill itself.

Credentials

No environment variables, credentials, or config paths are requested. Requested access is minimal and appropriate for the stated task.

Persistence & Privilege

always:false (normal). The skill is user-invocable and model invocation is enabled by default (platform default). Autonomous invocation alone is not a security problem, but you should consider whether you want the agent to fetch pages automatically or require user confirmation before each web access.

Assessment

This skill is internally consistent and low-risk because it is instruction-only, asks for no credentials, and explicitly disclaims booking or bulk scraping. Before installing, consider: (1) Source/homepage are not provided — confirm you trust the publisher. (2) Verify compliance with Taopiaopiao's terms of service and robots.txt; do not use it to automate actions the site forbids. (3) Clarify whether the agent will fetch pages autonomously or require the user to open pages first; if you prefer manual control, disable autonomous invocation or require explicit prompts. (4) Enforce rate limits and avoid bulk collection; log accesses and monitor for unexpected behavior. (5) Avoid collecting or storing any personal data found on pages. If you need stronger guarantees, ask the skill author for concrete examples of allowed requests and an explicit statement that no persistent scraping or credential requests will be added in future versions.

淘票票

用途与边界

• 面向公开电影/影院页的检索与场次/价格摘要
• 不提供下单、接口逆向或突破风控能力
• 仅用于公开页面的轻量分析与提醒

关键入口

• 主页：https://dianying.taobao.com/
• 电影页/影院页：站点入口
• 搜索入口：站内搜索

常见任务

• 指定城市/影院的场次列表摘要（时间、厅型、价格区间）
• 电影页的口碑评分/片长/主演整理
• 同片在不同影院的价格与时段对比

数据字段

• 影院名称、地址、场次时间、厅型、价格区间、链接
• 电影名称、评分、片长、主演、上映时间、链接
• 采集时间、来源链接

自动化要点

• 页面动态渲染与定位依赖，建议人工打开后触发解析
• 场次与价格随时间与区域变动，需标注采集时间与区域
• 频率控制，不进行批量抓取

示例流程

• 影院场次：输入城市/影院 → 抽取场次 → 输出时间/价格摘要
• 电影摘要：访问电影页 → 提取评分/片长/主演 → 输出卡片
• 同片对比：选择多影院 → 对比不同时段/价格 → 输出差异点

合规提示

• 遵守平台与地理位置授权规则，不进行接口调用或批量采集
• 结果仅用于内部分析与提醒