ClawHub
Back to skill

Security audit

美团特价酒店

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed Meituan hotel-deals search integration that sends limited search terms to a Tencent Cloud proxy and returns booking links, with no evidence of hidden persistence, credential theft, or destructive behavior.

Install this if you are comfortable with hotel search terms such as city, brand, and sort order being sent to the skill's Tencent Cloud proxy for Meituan deal results. Be aware it is not a neutral all-provider hotel comparison tool, and booking happens through Meituan links outside the skill.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Lp3

Medium
Category
MCP Least Privilege
Confidence
89% confidence
Finding
The skill describes use of a real-time Meituan API and a Tencent Cloud proxy, which implies outbound network access, yet no corresponding permission declaration is present. This creates a transparency and governance gap: users and the platform may not be aware the skill can send requests externally, increasing the risk of unintended data exposure or policy bypass if invocation context includes user-provided query data.

Vague Triggers

Medium
Confidence
86% confidence
Finding
The trigger phrases are broad generic travel terms such as '查酒店', '订酒店', and '酒店推荐', which are likely to match many ordinary conversations beyond the user's intent to use this specific Meituan deals skill. Over-broad triggers can cause unintended invocation, resulting in unnecessary external API calls, biased routing toward an affiliate-like commerce flow, or leakage of user travel intent to third-party services.

Vague Triggers

Medium
Confidence
84% confidence
Finding
The usage guidance instructs invocation whenever a user wants to search hotels, find room deals, or compare prices, without boundaries distinguishing this skill from general travel assistance. That ambiguity increases the chance the agent routes broad hotel-related requests into a third-party booking/search workflow, potentially exposing user queries externally and steering users toward a commercial provider without explicit consent.

Static analysis

No suspicious patterns detected.