luckin-order — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited luckin-order (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
通过 luckin CLI 查询门店、菜单并下单。
luckin 命令。如未安装，运行： curl -fsSL https://open.lkcoffee.com/install | bashluckin login 登录（浏览器授权）。所有交互通过 scripts/order.sh 完成，支持以下子命令：
| 子命令 | 说明 |
|---|---|
search <关键词> | 搜索附近门店 |
menu <门店ID> [关键词] | 查询门店菜单，可按名称过滤 |
preview <门店ID> <商品> | 预览订单（不会实际下单） |
order <门店ID> <商品> | 预览 → 确认后下单 |
status <订单ID> | 查看订单详情 |
cancel <订单ID> | 取消订单 |
用户提供位置描述（如"深圳大学沧海校区"）时：
curl -fsSL "https://nominatim.openstreetmap.org/search?q=<URL编码的地址>&format=json&limit=1"提取 lat 和 lon。
export LUCKIN_LAT=<纬度> LUCKIN_LNG=<经度>
bash scripts/order.sh search <关键词>deptId（门店ID）。bash scripts/order.sh menu <deptId> [关键词]输出包含商品名、productId、skuCode、价格。
商品格式：productId:skuCode[:数量]
# 预览
bash scripts/order.sh preview <deptId> <商品>
# 下单（会交互式确认）
bash scripts/order.sh order <deptId> <商品>bash scripts/order.sh status <orderId>
bash scripts/order.sh cancel <orderId>用户说"帮我查一下深大沧海校区附近有没有瑞幸"：
# 地理编码
curl -fsSL "https://nominatim.openstreetmap.org/search?q=%E6%B7%B1%E5%9C%B3%E5%A4%A7%E5%AD%A6%E6%B2%A7%E6%B5%B7%E6%A0%A1%E5%8C%BA&format=json&limit=1"
# → lat=22.5316483, lon=113.9350943
export LUCKIN_LAT=22.5316483 LUCKIN_LNG=113.9350943
bash scripts/order.sh search 沧海
# → 深圳大学沧海校区内部店 (deptId: 391076)用户说"看看有什么喝的"：
bash scripts/order.sh menu 391076用户说"帮我下单一个提拉米苏大福"：
bash scripts/order.sh preview 391076 1079:SP1894-00001:1
bash scripts/order.sh order 391076 1079:SP1894-00001:1order 命令需要设置 LUCKIN_LAT 和 LUCKIN_LNG 环境变量（门店坐标即可）。luckin 命令的输出是 JSON，脚本内部用 Python 3 解析格式化。~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.