Wa Quanquaner Skill

中国国内美团、饿了么、京东外卖红包优惠挖掘助手。一个链接挖取当日所有隐藏活动，方便、省心、省钱！当用户提到外卖红包、外卖优惠、饿了么红包、美团红包、点外卖省钱、外卖优惠券、领外卖券、外卖券、今天吃什么、点外卖、叫外卖、美团外卖、饿了么外卖、京东外卖、外卖神券、满减红包、挖券券、挖券券儿时使用此技能。适用地区：中国...

Security Scan

The skill's code and runtime instructions match its stated purpose (fetching and rendering aggregated food-delivery coupons from an external API); it does not request credentials or install third‑party packages, but it does rely on a third‑party server for data and reads optional environment variables.

Purpose & Capability

Name/description say: aggregate same‑day hidden coupons for Meituan/Eleme/JD. The code implements: intent parsing, an HTTP(s) fetch of a compact API, and rendering for WeChat/Feishu/text. Reaching out to an external compact API (waquanquaner.cn by default) is coherent with the stated purpose.

Instruction Scope

SKILL.md tells the agent to curl the compact API URL or run the included Node script; the runtime instructions do not ask the agent to read unrelated local files or secrets. Important note: the skill explicitly instructs making network requests to a third‑party server (waquanquaner.cn), which will reveal the runtime environment's IP and any request metadata to that server and will surface links returned by that server to the user.

Install Mechanism

No install spec is provided (instruction-only style). The package contains only Node.js source that uses built‑in http/https modules; there are no downloads from unknown URLs or external package installs. This is low-risk from an installation perspective.

Credentials

The registry declares no required env vars or credentials. The code/config however read two optional env variables (COMPACT_API_URL and LANDING_PAGE_URL) for customization. No secrets/credentials are requested. The implicit use of these env vars is reasonable for a configurable aggregator but is not declared as required in the metadata.

Persistence & Privilege

The skill is not always:true and is user-invocable; it can be invoked autonomously (platform default) but does not request permanent platform-level privileges or modify other skills. No evidence it writes system-wide configuration beyond its usage.

Assessment

This skill fetches coupon data from an external service (default: https://waquanquaner.cn). Before installing, consider that: (1) network requests will reveal the agent's IP and request metadata to that server; (2) the server supplies landing URLs that you or your users may click — those links should be treated like any third‑party link and inspected before use; (3) no credentials are requested, but you can override COMPACT_API_URL and LANDING_PAGE_URL (env vars) to point to a self‑hosted or trusted mirror if you don't want to rely on the default host. If you don't trust the external domain, do not enable automatic/autonomous invocation and consider auditing the API responses or self‑hosting the data source.

@image:assets/logo.png

🧧 外卖红包 — 一个链接挖取当日所有隐藏活动

🚀 执行方式

最通用、最不易出错的方式（推荐）：

curl -s "https://waquanquaner.cn/api/v1/activities/channel/skill_compact"

此命令在所有主流平台（Linux、macOS、Windows）上均可直接运行，无需额外依赖，是最简单可靠的数据获取方式。

如需格式化输出，可使用以下 Node.js 脚本（无缓存）：

node scripts/query.js

🎯 触发关键词

外卖红包、外卖优惠、饿了么红包、美团红包、点外卖省钱、外卖券、领券、今天吃什么、点外卖、美团外卖、饿了么外卖、京东外卖、外卖神券、满减红包、挖券券、挖券券儿

🔍 搜索关键词扩展

高频搜索词：

• 外卖红包怎么领
• 饿了么红包最大多少
• 美团外卖优惠券
• 京东外卖红包
• 今日外卖优惠
• 点外卖省钱技巧
• 外卖券领取

长尾关键词：

• 美团外卖新用户红包
• 饿了么天天领红包活动
• 京东外卖首单优惠
• 外卖红包叠加使用
• 周末外卖优惠
• 工作日午餐红包
• 夜宵外卖折扣

📝 输出格式示例

🧧 今日外卖隐藏红包已挖出！（4月10日）

🔗 一键领全部红包：
   https://waquanquaner.cn/go

👆 一个链接，挖取当日所有隐藏活动

💡 今日必领：
   🔵 饿了么·红包节天天领（今日主角）
      → 周末大餐红包提前抢，晚上就能用
   🔵 饿了么·大额红包限时领（热门推荐）
      → 领券下单立减，无门槛叠加用

💬 听说今天有人用红包点了一顿霸王餐

复制到微信打开 → 一个个领 → 再点餐