Real Skill packageSource verifiedClawHub registry

美团跑腿

美团跑腿下单助手。支持场景：① 帮取送（A地取件送到B地，支持品类：餐饮、文件、生鲜、蛋糕、鲜花、数码、服饰、快递、五金、汽配等）② 帮买（代购商品）③ 帮取号（餐厅取号、医院挂号、其他取号）④ 帮搬装/帮扔杂物/其他帮忙（骑手到指定地址帮忙）。触发词：跑腿、下跑腿单、美团跑腿、同城配送、取号、挂号、排号、排队、帮搬、帮买、帮扔、帮忙、扔垃圾、寄文件、叫骑手、骑手帮忙、送东西、帮取、配送、帮送、买东西。

Identity and source

Publisher attributionmeituan-techregistry owner unverified by skillvetai
Functional categoryAwaiting category reviewreview pending · 0% rule confidence
Package forminstruction with code18 recorded files
Canonical sourceClawHub registryclawhub:meituan-tech:mt-paotui-for-client
Open canonical source ↗

Platform declarations

These states come from the source or distribution context. None of the entries below are SkillVetAI compatibility test results.

OpenClawnative officialProvenance: registry distribution

Independent structural checks

These checks parse the fixed package against dated platform rules. They do not execute the Skill or verify task behavior.

Claude Codeissues found
Checker 0.1.0 · agent-skills-2026-08-13+claude-code-docs-2026-08-13 · 9/20/2026.claude/skills/MT-Paotui-For-Client
1 structural issue
  • error: name must contain lowercase ASCII letters, numbers and single hyphens only. SKILL.md

Runtime, accounts, dependencies, permissions, network behavior and task quality remain untested.

OpenAI Codexissues found
Checker 0.1.0 · agent-skills-2026-08-13+codex-docs-2026-08-13 · 9/20/2026.agents/skills/MT-Paotui-For-Client
1 structural issue
  • error: name must contain lowercase ASCII letters, numbers and single hyphens only. SKILL.md

Runtime, accounts, dependencies, permissions, network behavior and task quality remain untested.

OpenClawissues found
Checker 0.1.0 · agent-skills-2026-08-13+openclaw-docs-2026-08-13 · 9/20/2026skills/MT-Paotui-For-Client
1 structural issue
  • error: name must contain lowercase ASCII letters, numbers and single hyphens only. SKILL.md

Runtime, accounts, dependencies, permissions, network behavior and task quality remain untested.

Installation and inspection

This command is recorded from the source ecosystem and resolves the registry's latest release. The fixed release shown on this page should be inspected before adoption.

clawhub install @meituan-tech/mt-paotui-for-client
clawhub inspect @meituan-tech/mt-paotui-for-client --version 1.0.5

Security evidence

SkillVetAI static result: high signal

This automated, non-executing scan is bound to this release hash. It is not a safety certification and may contain false positives or false negatives.

Status
completed
Coverage
partial text content
Files
17 / 18 inspected as text
Checked
9/20/2026, 4:09:55 PM
Scanner
0.1.3
Policy
1.0.3
2 automated findings
highRemote content is piped directly to a shellpassport-auth/reference.md:137 · confidence 98%curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.40.1/install.sh | bash
mediumRemote installer is downloaded without an integrity checkpassport-auth/reference.md:137 · confidence 70%curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.40.1/install.sh
1 High/Critical review queue entry
STATIC_DOWNLOAD_PIPE_TO_SHELLpending
Open human review queue →
4 inferred permission indicators
  • network access — automatically inferred
  • filesystem read — automatically inferred
  • filesystem write — automatically inferred
  • credential access — automatically inferred
7 dependency and API indicators
  • npm: @sec/cliguard ^1.3.0
  • api: clawhub.ai
  • api: km.sankuai.com
  • api: nodejs.org
  • api: passport.meituan.com
  • api: raw.githubusercontent.com
  • api: your-api
External clawhub result: suspicious

This is registry-supplied evidence for the recorded release, not an independent SkillVetAI scan. Check the canonical source for the full report, scanner versions, scope, and current moderation state.

Evidence checked
9/20/2026, 8:41:46 AM
Release binding
Matches this record
  • skillspector: suspicious
  • llm: suspicious

Recorded files

The catalog stores hashes and an inventory summary for change detection. It does not republish the package contents.

Package content hashsha256:de320bc47fd4995bc6e2bf14e30939d6833a9bab7c968b1b93195756e7917793
Show up to 18 recorded paths
  • config.json
  • dist/index.js
  • node_modules/@sec/cliguard/core/cliguard-wrapper.js
  • node_modules/@sec/cliguard/core/cliguard.js
  • node_modules/@sec/cliguard/index.js
  • node_modules/@sec/cliguard/package.json
  • node_modules/@sec/cliguard/README.md
  • package.json
  • paotui.js
  • passport-auth/reference.md
  • passport-auth/scripts/install.sh
  • passport-auth/scripts/qrcode-image.sh
  • references/commands.md
  • references/errors.md
  • references/params.md
  • run.sh
  • skill-card.md
  • SKILL.md

Source changelog

**mt-paotui-for-client 1.0.5 Change Summary** - Rebuilt project with dist/和passport-auth环境准备、鉴权、run.sh等文件重构和新增，实现全流程本地自包含。 - 大量移除dist/和vendor/cliguard相关旧实现，新增passport-auth、cliguard等依赖包、脚本和配置，完善免依赖外部Skill的授权模块。 - SKILL.md规范全面升级：细化安全门控、输出卡片模板和交互流程，格式化和隐私要求更严格，明确“手机号必须真实”及地址簿、POI使用场景。 - 工作流大幅调整，所有流程以本地CLI脚本及Token缓存驱动，全部下单前流程和授权过程自主可控。 - 支持帮取送必预览普通送和1v1急送两种服务类型并对比，和之前版本相比覆盖更多业务常见场景。 - 输出全程标准化，禁止过程