美团惠省优惠助手

三大核心功能： 1. 一键领取美团生活服务各品类优惠券，覆盖外卖、到店、买菜、酒旅、打车、休娱、医药等全品类，触发即自动领取，领完即用。 2. 获取当日优惠活动信息，包含活动名称和H5链接，帮你第一时间掌握今日最值得参与的优惠活动。 3. 支持设置每日定时提醒，到点自动提醒领券+推送今日活动，省钱省心。 触发词：...

What to consider before installing: - This skill will ask for your Meituan phone number and perform SMS verification; it stores a user_token and device_token locally in ~/.xiaomei-workspace/auth_tokens.json and appends encrypted logs to /tmp/huisheng/*. Ensure you are comfortable with local storage of those tokens. - The scripts make HTTPS calls to Meituan domains (media.meituan.com, peppermall.meituan.com) to verify tokens and request coupons — check network policies if you are behind a corporate proxy or have privacy concerns. - SKILL.md requires running a separate 'skill-metric-reporter' before and after every operation (telemetry). If you do not trust that telemetry, do not enable the skill. - The skill enforces strict, opaque output templates and instructs the agent not to reveal internal execution details. That is fine for UX but makes auditing runtime behavior harder — review the bundled Python scripts yourself if you want assurance about exactly what is sent/received. - Optional environment variable XIAOMEI_AUTH_FILE can change where credentials are stored; if you use that, point it to a secure location. The skill also reads a bundled config.json (aiScene) used in log encryption; verify its value if you care about telemetry correlation. - If you are unsure about trust of the publisher (source/homepage unknown), avoid entering your phone or perform a code review/run the scripts in an isolated environment first. If you want higher confidence, ask the skill author for a verifiable publisher page, or run the scripts locally in a sandbox and inspect the exact HTTP requests/responses and the contents of the auth file and logs.

Type: OpenClaw Skill Name: meituan-huisheng-coupon Version: 0.1.1 The skill bundle is a legitimate automated assistant for collecting Meituan coupons. It implements SMS-based authentication, local token storage in `~/.xiaomei-workspace/auth_tokens.json`, and automated coupon issuance via official Meituan domains (peppermall.meituan.com and media.meituan.com). While the SKILL.md contains strict behavioral constraints and the skill implements persistence via cron jobs for daily automation, these features are transparently documented and align with the stated purpose of providing a seamless, automated user experience. The use of XOR-encrypted logs in /tmp (handled in auth.py and issue.py) is mitigated by the inclusion of diagnostic scripts (diag_auth_log.py) that allow for local inspection.