Back to skill
Skillv1.0.0
ClawScan security
Meituan Bike · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 16, 2026, 9:21 AM
- Verdict
- Benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- This is an informational Meituan Bike assistant: it installs nothing, requests no credentials, and its instructions match the described purpose.
- Guidance
- This skill is purely informational and coherent with its description. It doesn't request keys, access files, or install software. Before using, remember: (1) verify any city-specific pricing or rules in the official Meituan app (the SKILL.md gives general guidance and may be out of date), (2) don't paste account credentials or sensitive personal data into chats with the skill, and (3) autonomous invocation is allowed by default on the platform — although this particular skill has no special privileges, avoid sharing private information during automated runs.
Review Dimensions
- Purpose & Capability
- okName, description, and contents all describe a Meituan (shared bike) assistant that provides riding guidance, billing rules, and usage tips. There are no unrelated requirements (no binaries, env vars, or installs).
- Instruction Scope
- okSKILL.md contains only role/profile text and domain knowledge for advising users about bike usage and billing. It does not instruct the agent to read files, access credentials, contact external endpoints, or collect/transmit user data.
- Install Mechanism
- okInstruction-only skill with no install spec and no code files; nothing is written to disk or downloaded.
- Credentials
- okNo environment variables, credentials, or config paths are requested — proportional to an informational assistant.
- Persistence & Privilege
- okalways is false and the skill does not request persistent system privileges or modify other skills or system settings.