Security audit
Security checks for vulnerabilities and agentic risk
The skill is a coherent Meituan travel assistant, but it asks users to run an unpinned npm/npx CLI that can access a sensitive Meituan token.
Review the npm package provenance before installing, prefer a pinned exact version or lockfile-based install, and only provide MEITUAN_HT_TOKEN in a trusted environment. Do not use this skill where an unreviewed future npm package version could access sensitive credentials or affect paid travel actions.
The manifest description, usage guidance, examples, and required user-facing waiting message are all written in Chinese, and the skill does not indicate that this language constraint is optional or region-specific. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.
The skill instructs users to execute an unpinned package via npx, which can fetch the latest published version at runtime. If the package is updated maliciously, compromised upstream, or a typo/package-ownership issue occurs, the skill could execute attacker-controlled code in the local environment with access to the configured token.
This invocation again relies on npx without an exact version pin, causing code to be downloaded and executed dynamically at runtime. In this skill, the risk is elevated because the tool is expected to access MEITUAN_HT_TOKEN, so a compromised package version could exfiltrate credentials or manipulate travel query results.
No suspicious patterns detected.
